netgear r6900p firmware

Name: netgear r6900p firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

22critical47high38medium1low

updated 2026-10-28

vulnerabilities (110)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-27646US	high8.8	1.43% (73rd)	Exploit	1.3.3.148	2023-03-29	< 1.3.3.148
CVE-2022-27643US	high8.8	25.2% (98th)	—	1.3.3.148	2023-03-29	< 1.3.3.148
CVE-2021-40847US	high8.1OT elevated	10.0% (96th)	—	no fix	2021-09-21	= 1.3.2.134
CVE-2021-34991US	high8.8	5.67% (93rd)	—	1.3.3.142	2021-11-15	< 1.3.3.142
CVE-2021-45612US	critical9.8	2.49% (85th)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2021-45622US	critical9.8	2.37% (84th)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2021-45617US	critical9.8	2.06% (81st)	—	1.3.2.132	2021-12-26	< 1.3.2.132
CVE-2021-45621US	critical9.8	2.02% (81st)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2021-45620US	critical9.8	2.02% (81st)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2021-45616US	critical9.8	2.02% (81st)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2021-38528US	critical9.8	1.99% (80th)	—	1.3.2.132	2021-08-11	< 1.3.2.132
CVE-2017-18762US	high8.8	1.86% (79th)	—	1.2.0.22	2020-04-22	< 1.2.0.22
CVE-2021-45624US	critical9.8	1.69% (77th)	—	1.3.2.132	2021-12-26	< 1.3.2.132
CVE-2021-45625US	critical9.8	1.67% (77th)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2019-17372US	high8.1	1.66% (77th)	—	no fix	2019-10-09	—
CVE-2020-35800US	critical9.4	1.61% (76th)	—	1.3.2.124	2020-12-30	< 1.3.2.124
CVE-2020-11770US	high8.8	1.60% (76th)	—	1.3.1.64	2020-04-15	< 1.3.1.64
CVE-2021-45638US	critical9.8	1.58% (75th)	—	1.3.2.132	2021-12-26	< 1.3.2.132
CVE-2021-45610US	critical9.8	1.48% (74th)	—	1.3.2.132	2021-12-26	< 1.3.2.132
CVE-2022-27647US	high8.0	1.47% (74th)	—	1.3.3.148	2023-03-29	< 1.3.3.148
CVE-2021-38519US	high7.2	1.37% (72nd)	—	1.3.2.132	2021-08-11	< 1.3.2.132
CVE-2018-21156US	high7.2	1.35% (71st)	—	1.3.0.18	2020-04-27	< 1.3.0.18
CVE-2021-45647US	high7.5	1.35% (71st)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2021-38516US	critical9.8	1.34% (71st)	—	1.3.1.44	2021-08-11	< 1.3.1.44
CVE-2021-45607US	high8.8	1.32% (71st)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2020-35796US	critical9.8	1.30% (70th)	—	1.3.2.124	2020-12-30	< 1.3.2.124
CVE-2018-21134US	critical9.8	1.30% (70th)	—	1.3.1.44	2020-04-23	< 1.3.1.44
CVE-2021-45609US	critical9.8	1.24% (69th)	—	1.3.2.132	2021-12-26	< 1.3.2.132
CVE-2020-35795US	critical9.8	1.20% (68th)	—	1.3.2.124	2020-12-30	< 1.3.2.124
CVE-2018-21139US	high7.5	1.19% (68th)	—	1.3.1.44	2020-04-23	< 1.3.1.44
CVE-2021-45527US	critical9.8	1.17% (67th)	—	1.3.2.124	2021-12-26	< 1.3.2.124
CVE-2021-29068US	high8.8	1.09% (65th)	—	1.3.2.124	2021-03-23	< 1.3.2.124
CVE-2021-45650US	high7.5	1.08% (65th)	—	1.3.2.126	2021-12-26	< 1.3.2.126
CVE-2018-21163US	high7.2	1.08% (65th)	—	1.3.0.18	2020-04-23	< 1.3.0.18
CVE-2021-45499US	high8.8	1.05% (64th)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2021-38525US	high7.2	1.02% (63rd)	—	1.3.1.64	2021-08-11	< 1.3.1.64
CVE-2021-45679US	high7.2	0.99% (62nd)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2017-18799US	high7.5	0.98% (62nd)	—	1.0.0.56	2020-04-21	< 1.0.0.56
CVE-2021-45553US	high8.8	0.97% (62nd)	—	1.3.2.126	2021-12-26	< 1.3.2.126
CVE-2017-18738US	high8.8	0.96% (61st)	—	1.2.0.22	2020-04-23	< 1.2.0.22
CVE-2023-38412US	high8.8	0.96% (61st)	—	no fix	2023-08-07	= 1.3.3.154
CVE-2021-45606US	high8.8	0.95% (61st)	—	1.3.3.140	2021-12-26	< 1.3.3.140
CVE-2022-48196US	critical9.8	0.94% (61st)	—	1.3.3.152	2022-12-30	< 1.3.3.152
CVE-2019-20730US	critical9.8	0.91% (60th)	—	1.3.0.20	2020-04-16	< 1.3.0.20
CVE-2021-45525US	high8.8	0.90% (59th)	—	1.3.2.124	2021-12-26	< 1.3.2.124
CVE-2017-18849US	high7.8	0.89% (59th)	—	1.0.0.56	2020-04-20	< 1.0.0.56
CVE-2024-12988US	high7.5	0.89% (59th)	—	no fix	2024-12-27	= 1.3.3.154
CVE-2022-27642US	high8.8OT elevated	0.87% (59th)	—	1.3.3.148	2023-03-29	< 1.3.3.148
CVE-2018-21225US	medium6.8	0.85% (58th)	—	1.2.0.22	2020-04-28	< 1.2.0.22
CVE-2018-21227US	medium6.8	0.85% (58th)	—	1.0.0.62	2020-04-24	< 1.0.0.62

showing 50 of 110

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')24 CVEs
CWE-787Out-of-bounds Write22 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')18 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')5 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE110 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan