NETGEAR EX6200 Firmware vulnerabilities

54 CVEs affecting NETGEAR EX6200 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-4150, published 2025-05-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-38925, published 2023-08-07. High severity, CVSS 8.8. EPSS: 15.2% chance of exploitation in the next 30 days. Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi.
CVE-2018-21162, published 2020-04-23. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250 before 1.0.4.8,…
CVE-2020-27861, published 2021-02-12. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this…
CVE-2025-4149, published 2025-05-01. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was found in Netgear EX6200 1.0.3.94. It has been classified as critical. This affects the function sub_54014. The manipulation of the argument host leads to buffer overflow. It is…
CVE-2025-4148, published 2025-05-01. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this issue is the function sub_503FC. The manipulation of the argument host leads to buffer overflow. The…
CVE-2025-4150, published 2025-05-01. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in Netgear EX6200 1.0.3.94. It has been declared as critical. This vulnerability affects the function sub_54340. The manipulation of the argument host leads to buffer…
CVE-2018-21153, published 2020-04-27. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, EX2700 before 1.0.1.32, EX6100v2 before 1.0.1.70,…
CVE-2025-4146, published 2025-05-01. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. Affected is the function sub_41940. The manipulation of the argument host leads to buffer overflow. It is…
CVE-2018-21181, published 2020-04-28. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.28, EX2700 before 1.0.1.32, EX6200v2 before 1.0.1.56, R7500v2 before…
CVE-2018-21156, published 2020-04-27. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38, D6400 before 1.0.0.74, D7000v2 before 1.0.0.74, D8500 before 1.0.3.39,…

Latest

CVE-2025-4147, published 2025-05-01. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this vulnerability is the function sub_47F7C. The manipulation of the argument host leads to buffer…
CVE-2025-4145, published 2025-05-01. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Netgear EX6200 1.0.3.94. This issue affects the function sub_3D0BC. The manipulation of the argument host leads to buffer…
CVE-2025-4142, published 2025-04-30. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. This vulnerability affects the function sub_3C8EC. The manipulation of the argument host leads to buffer…
CVE-2025-4141, published 2025-04-30. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. This affects the function sub_3C03C. The manipulation of the argument host leads to buffer overflow. It is…
CVE-2021-34947, published 2024-05-07. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR…
CVE-2023-38926, published 2023-08-07. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set.