NETGEAR RBK23 Firmware vulnerabilities

8 CVEs affecting NETGEAR RBK23 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-27253, published 2021-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-27255, published 2021-03-05. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this…
CVE-2021-27253, published 2021-04-14. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability,…
CVE-2021-27252, published 2021-04-14. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this…
CVE-2021-29068, published 2021-03-23. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2 before 1.0.4.98, R7000 before 1.0.11.106, R6900P before 1.3.2.124,…
CVE-2021-27256, published 2021-03-05. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit…
CVE-2021-27251, published 2021-04-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The…
CVE-2021-27254, published 2021-03-05. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific…
CVE-2021-27257, published 2021-03-05. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not…