NETGEAR SRX5308 Firmware vulnerabilities

20 CVEs affecting NETGEAR SRX5308 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-2396, published 2023-04-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-10106, published 2017-01-03. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read…
CVE-2023-2380, published 2023-04-28. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation leads to denial of service. It is possible to…
CVE-2019-17049, published 2019-09-30. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user account.
CVE-2016-11060, published 2020-04-28. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10.
CVE-2023-2396, published 2023-04-28. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the…
CVE-2023-2395, published 2023-04-28. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Management Interface. The manipulation of the argument…
CVE-2023-2390, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=time_zone.htm of the…
CVE-2023-2389, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the…
CVE-2023-2383, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the…
CVE-2023-2394, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The…

Latest

CVE-2023-2393, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file…
CVE-2023-2392, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=time_zone.htm of the…
CVE-2023-2391, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=time_zone.htm of the…
CVE-2023-2388, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of the file…
CVE-2023-2387, published 2023-04-28. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm…