{"meta":{"title":"KEV entries: NETGEAR","description":"All KEV entries for vendor NETGEAR.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":8,"vendor":"NETGEAR","entries":8,"shareOfCatalogPercent":0.5,"ransomwareKnown":0,"firstDateAdded":"2021-11-03","latestDateAdded":"2022-09-08","rank":35},"data":[{"cveID":"CVE-2017-5521","vendorProject":"NETGEAR","product":"Multiple Devices","vulnerabilityName":"NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-200"],"shortDescription":"Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.","requiredAction":"Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.","notes":"https://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability; https://nvd.nist.gov/vuln/detail/CVE-2017-5521","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-5521"},{"cveID":"CVE-2017-6862","vendorProject":"NETGEAR","product":"Multiple Devices","vulnerabilityName":"NETGEAR Multiple Devices Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6862","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6862"},{"cveID":"CVE-2017-6334","vendorProject":"NETGEAR","product":"DGN2200 Devices","vulnerabilityName":"NETGEAR DGN2200 Devices OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6334","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6334"},{"cveID":"CVE-2016-1555","vendorProject":"NETGEAR","product":"Wireless Access Point (WAP) Devices","vulnerabilityName":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-77"],"shortDescription":"Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1555","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-1555"},{"cveID":"CVE-2016-10174","vendorProject":"NETGEAR","product":"WNR2000v5 Router","vulnerabilityName":"NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-10174","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-10174"},{"cveID":"CVE-2017-6077","vendorProject":"NETGEAR","product":"Wireless Router DGN2200","vulnerabilityName":"NETGEAR DGN2200 Remote Code Execution Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6077","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-6077"},{"cveID":"CVE-2016-6277","vendorProject":"NETGEAR","product":"Multiple Routers","vulnerabilityName":"NETGEAR Multiple Routers Remote Code Execution Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-352"],"shortDescription":"NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-6277","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-6277"},{"cveID":"CVE-2020-26919","vendorProject":"NETGEAR","product":"JGS516PE Devices","vulnerabilityName":"Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Netgear JGS516PE devices contain a missing function level access control vulnerability.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-26919","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-26919"}]}