netgear xr500 firmware

Name: netgear xr500 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

8critical42high67medium1low

updated 2026-10-28

vulnerabilities (120)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-45618US	critical9.8	2.02% (81st)	—	2.3.2.114	2021-12-26	< 2.3.2.114
CVE-2021-45623US	critical9.8	1.69% (77th)	—	2.3.2.66	2021-12-26	< 2.3.2.66
CVE-2021-38527US	critical9.8	1.69% (77th)	—	2.3.2.114	2021-08-11	< 2.3.2.114
CVE-2019-20706US	high8.0	1.64% (76th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2020-35800US	critical9.4	1.61% (76th)	—	2.3.2.66	2020-12-30	< 2.3.2.66
CVE-2020-11770US	high8.8	1.60% (76th)	—	2.3.2.32	2020-04-15	< 2.3.2.32
CVE-2021-27255US	high8.8OT elevated	1.40% (72nd)	—	2.3.2.114	2021-03-05	< 2.3.2.114
CVE-2021-38516US	critical9.8	1.34% (71st)	—	2.3.2.32	2021-08-11	< 2.3.2.32
CVE-2019-20709US	high8.0	1.34% (71st)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20708US	high8.0	1.31% (70th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20710US	high8.0	1.29% (70th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2020-35799US	critical9.8	1.20% (68th)	—	no fix	2020-12-30	= 2.3.2.32
CVE-2020-35795US	critical9.8	1.20% (68th)	—	2.3.2.66	2020-12-30	< 2.3.2.66
CVE-2021-27253US	high8.8	1.13% (66th)	—	2.3.2.114	2021-04-14	< 2.3.2.114
CVE-2021-27252US	high8.8	1.12% (66th)	—	2.3.2.114	2021-04-14	< 2.3.2.114
CVE-2019-20650US	high7.5	1.12% (66th)	—	2.3.2.56	2020-04-15	< 2.3.2.56
CVE-2021-29068US	high8.8	1.09% (65th)	—	2.3.2.66	2021-03-23	< 2.3.2.66
CVE-2018-21117US	high8.8	1.05% (64th)	—	2.3.2.32	2020-04-22	< 2.3.2.32
CVE-2018-21116US	high8.8	1.05% (64th)	—	2.3.2.32	2020-04-22	< 2.3.2.32
CVE-2021-38525US	high7.2	1.02% (63rd)	—	2.3.2.40	2021-08-11	< 2.3.2.40
CVE-2018-21115US	high8.8	0.99% (62nd)	—	2.3.2.32	2020-04-22	< 2.3.2.32
CVE-2021-45642US	high7.2	0.97% (62nd)	—	2.3.2.66	2021-12-26	< 2.3.2.66
CVE-2021-27256US	high8.8	0.96% (62nd)	—	2.3.2.114	2021-03-05	< 2.3.2.114
CVE-2021-45548US	high8.8	0.95% (61st)	—	2.3.2.66	2021-12-26	< 2.3.2.66
CVE-2019-20703US	high8.0	0.91% (60th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20707US	high8.0	0.89% (59th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2020-35831US	high8.1	0.87% (59th)	—	2.3.2.56	2020-12-30	< 2.3.2.56
CVE-2019-20726US	medium6.8	0.85% (58th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20724US	medium6.8	0.85% (58th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20722US	medium6.8	0.85% (58th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2021-45658US	critical9.8	0.85% (58th)	—	2.3.2.56	2021-12-26	< 2.3.2.56
CVE-2019-20689US	medium6.8	0.84% (58th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20688US	medium6.8	0.84% (58th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20705US	high8.0	0.83% (58th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20680US	high8.0	0.80% (56th)	—	2.3.2.32	2020-04-15	< 2.3.2.32
CVE-2019-20684US	high8.8	0.79% (56th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20704US	high8.0	0.78% (56th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20702US	high8.0	0.78% (56th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2021-38514US	low2.7	0.77% (55th)	—	2.3.2.22	2021-08-11	< 2.3.2.22
CVE-2019-20727US	medium6.8	0.74% (54th)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2021-27251US	high8.8OT elevated	0.73% (54th)	—	2.3.2.114	2021-04-14	< 2.3.2.114
CVE-2021-45602US	high7.8	0.73% (54th)	—	2.3.2.130	2021-12-26	< 2.3.2.130
CVE-2020-35839US	high8.1	0.72% (54th)	—	2.3.2.56	2020-12-30	< 2.3.2.56
CVE-2021-45641US	high8.8	0.71% (53rd)	—	2.3.2.56	2021-12-26	< 2.3.2.56
CVE-2019-20711US	high8.0	0.70% (53rd)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2019-20701US	high8.0	0.70% (53rd)	—	2.3.2.32	2020-04-16	< 2.3.2.32
CVE-2018-21118US	high8.8	0.70% (53rd)	—	2.3.2.32	2020-04-22	< 2.3.2.32
CVE-2020-35837US	medium4.8	0.68% (52nd)	—	2.3.2.56	2020-12-30	< 2.3.2.56
CVE-2020-35826US	medium4.8	0.68% (52nd)	—	2.3.2.56	2020-12-30	< 2.3.2.56
CVE-2020-35819US	medium4.8	0.68% (52nd)	—	2.3.2.56	2020-12-30	< 2.3.2.56

showing 50 of 120

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')54 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')27 CVEs
CWE-787Out-of-bounds Write14 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-254CWE-2542 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE120 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan