Known Vulnerabilities for Xr300 by Netgear
Listed below are 10 of the newest known vulnerabilities associated with "Xr300" by "Netgear".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
More device details and information can be found at device.report here: Netgear Xr300
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-36499 json | Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie... | 8.8 - HIGH | 2023-08-07 | 2023-08-09 |
| CVE-2022-27643 json | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1... | 8.8 - HIGH | 2023-03-29 | 2023-04-05 |
| CVE-2021-45639 json | Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 befor... | 6.1 - MEDIUM | 2021-12-26 | 2022-01-06 |
| CVE-2021-45625 json | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68,... | 9.8 - CRITICAL | 2021-12-26 | 2022-01-04 |
| CVE-2021-45624 json | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.6... | 9.8 - CRITICAL | 2021-12-26 | 2022-01-05 |
| CVE-2021-45622 json | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24,... | 9.8 - CRITICAL | 2021-12-26 | 2022-01-10 |
| CVE-2021-45621 json | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24,... | 9.8 - CRITICAL | 2021-12-26 | 2022-01-10 |
| CVE-2021-45620 json | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24,... | 9.8 - CRITICAL | 2021-12-26 | 2022-01-07 |
| CVE-2021-45617 json | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24,... | 9.8 - CRITICAL | 2021-12-26 | 2022-01-10 |
| CVE-2021-45612 json | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24,... | 9.8 - CRITICAL | 2021-12-26 | 2022-01-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | Xr300 | - |