CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–8 of 8 records

CVE Vendor Product Added Due Status
CVE-2017-5521 — NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
 NETGEAR Multiple Devices Sep 8, 2022 Sep 29, 2022
CVE-2017-6862 — NETGEAR Multiple Devices Buffer Overflow Vulnerability
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
 NETGEAR Multiple Devices Jun 8, 2022 Jun 22, 2022
CVE-2016-10174 — NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.
 NETGEAR WNR2000v5 Router Mar 25, 2022 Apr 15, 2022
CVE-2016-1555 — NETGEAR Multiple WAP Devices Command Injection Vulnerability
Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.
 NETGEAR Wireless Access Point (WAP) Devices Mar 25, 2022 Apr 15, 2022
CVE-2017-6334 — NETGEAR DGN2200 Devices OS Command Injection Vulnerability
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands
 NETGEAR DGN2200 Devices Mar 25, 2022 Apr 15, 2022
CVE-2016-6277 — NETGEAR Multiple Routers Remote Code Execution Vulnerability
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
 NETGEAR Multiple Routers Mar 7, 2022 Sep 7, 2022
CVE-2017-6077 — NETGEAR DGN2200 Remote Code Execution Vulnerability
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
 NETGEAR Wireless Router DGN2200 Mar 7, 2022 Sep 7, 2022
CVE-2020-26919 — Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
Netgear JGS516PE devices contain a missing function level access control vulnerability.
 NETGEAR JGS516PE Devices Nov 3, 2021 May 3, 2022