netgear wnr1000 firmware

Name: netgear wnr1000 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical20high12medium0low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-3317US	critical9.8	4.77% (92nd)	—	1.0.2.60	2020-01-29	< 1.0.2.60
CVE-2013-3316US	critical9.8	4.77% (92nd)	—	1.0.2.60	2020-01-29	< 1.0.2.60
CVE-2017-18734US	high8.8	3.26% (88th)	—	1.1.0.44	2020-04-23	< 1.1.0.44
CVE-2019-20488US	critical9.8	2.12% (82nd)	—	no fix	2020-03-02	= 1.1.0.54
CVE-2017-18764US	high8.8	1.86% (79th)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2017-18737US	high8.8	1.84% (79th)	—	1.1.0.44	2020-04-23	< 1.1.0.44
CVE-2019-17372US	high8.1	1.66% (77th)	—	no fix	2019-10-09	—
CVE-2018-21168US	high7.5	1.42% (73rd)	—	1.1.0.46	2020-04-27	< 1.1.0.46
CVE-2019-20489US	critical9.8	1.29% (70th)	—	no fix	2020-03-02	= 1.1.0.54
CVE-2018-21139US	high7.5	1.19% (68th)	—	1.1.0.54	2020-04-23	< 1.1.0.54
CVE-2016-11059US	high7.5	1.07% (65th)	—	2017-01-06	2020-04-28	< 2017-01-06
CVE-2016-11057US	high7.5	1.01% (63rd)	—	2017-01-06	2020-04-28	< 2017-01-06
CVE-2017-18787US	high7.8	0.74% (54th)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2017-18786US	high7.8	0.74% (54th)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2018-21226US	high8.8	0.70% (53rd)	—	1.1.0.48	2020-04-28	< 1.1.0.48
CVE-2019-20486US	medium6.1	0.67% (52nd)	—	no fix	2020-03-02	= 1.1.0.54
CVE-2018-21209US	medium4.8	0.66% (51st)	—	1.1.0.46	2020-04-28	< 1.1.0.46
CVE-2017-18788US	medium6.7	0.64% (51st)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2018-21169US	high8.8	0.63% (50th)	—	1.1.0.46	2020-04-27	< 1.1.0.46
CVE-2017-18784US	medium6.1	0.63% (50th)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2017-18783US	medium6.1	0.63% (50th)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2017-18782US	high8.8	0.62% (49th)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2019-20738US	medium5.4	0.54% (45th)	—	1.1.0.50	2020-04-16	< 1.1.0.50
CVE-2017-18785US	medium4.8	0.50% (43rd)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2017-18781US	high8.8	0.49% (42nd)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2018-21231US	medium5.4	0.47% (41st)	—	1.1.0.42	2020-04-24	< 1.1.0.42
CVE-2018-21230US	medium5.4	0.47% (40th)	—	1.1.0.42	2020-04-24	< 1.1.0.42
CVE-2017-18703US	high8.8	0.46% (40th)	—	1.1.0.46	2020-04-24	< 1.1.0.46
CVE-2017-18749US	high8.8	0.46% (40th)	—	1.1.0.44	2020-04-23	< 1.1.0.44
CVE-2017-18791US	high8.8	0.46% (40th)	—	1.1.0.40	2020-04-21	< 1.1.0.40
CVE-2019-20487US	high8.8	0.46% (39th)	—	no fix	2020-03-02	= 1.1.0.54
CVE-2017-18763US	medium6.5	0.46% (39th)	—	1.1.0.42	2020-04-22	< 1.1.0.42
CVE-2017-18776US	high8.4	0.41% (35th)	—	1.1.0.40	2020-04-22	< 1.1.0.40
CVE-2017-18779US	high7.8	0.35% (29th)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2017-18778US	medium5.5	0.29% (22nd)	—	1.1.0.44	2020-04-22	< 1.1.0.44
CVE-2017-18780US	medium5.5	0.28% (21st)	—	1.1.0.44	2020-04-22	< 1.1.0.44

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-287Improper Authentication6 CVEs
CWE-352Cross-Site Request Forgery (CSRF)6 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-269Improper Privilege Management1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan