NETGEAR Readynas OS Firmware vulnerabilities

3 CVEs affecting NETGEAR Readynas OS Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-18856, published 2020-04-29.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-21102, published 2020-04-23. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.
• CVE-2017-18854, published 2020-04-29. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection.
• CVE-2017-18856, published 2020-04-29. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection.