netgear ex6000 firmware

Name: netgear ex6000 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:ex6000_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

3critical6high11medium1low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-35800US	critical9.4	1.61% (76th)	—	1.0.0.44	2020-12-30	< 1.0.0.44
CVE-2018-21156US	high7.2	1.35% (71st)	—	1.0.0.30	2020-04-27	< 1.0.0.30
CVE-2020-35796US	critical9.8	1.30% (70th)	—	1.0.0.44	2020-12-30	< 1.0.0.44
CVE-2018-21134US	critical9.8	1.30% (70th)	—	1.0.0.32	2020-04-23	< 1.0.0.32
CVE-2018-21163US	high7.2	1.08% (65th)	—	1.0.0.30	2020-04-23	< 1.0.0.30
CVE-2021-38514US	low2.7	0.77% (55th)	—	1.0.0.38	2021-08-11	< 1.0.0.38
CVE-2019-20756US	medium6.1	0.72% (54th)	—	1.0.0.30	2020-04-16	< 1.0.0.30
CVE-2017-18747US	medium6.5	0.70% (53rd)	—	1.0.0.24	2020-04-23	< 1.0.0.24
CVE-2019-20732US	medium6.7	0.65% (51st)	—	1.0.0.30	2020-04-16	< 1.0.0.30
CVE-2018-21093US	high8.8	0.63% (50th)	—	1.0.0.30	2020-04-27	< 1.0.0.30
CVE-2017-18746US	medium6.5	0.48% (42nd)	—	1.0.0.24	2020-04-23	< 1.0.0.24
CVE-2019-20734US	high8.8	0.48% (41st)	—	1.0.0.30	2020-04-16	< 1.0.0.30
CVE-2018-21231US	medium5.4	0.47% (41st)	—	1.0.0.24	2020-04-24	< 1.0.0.24
CVE-2018-21230US	medium5.4	0.47% (41st)	—	1.0.0.24	2020-04-24	< 1.0.0.24
CVE-2021-45526US	high8.8	0.46% (40th)	—	1.0.0.38	2021-12-26	< 1.0.0.38
CVE-2019-20691US	high8.8	0.46% (40th)	—	1.0.0.30	2020-04-16	< 1.0.0.30
CVE-2019-20700US	medium6.7	0.38% (32nd)	—	1.0.0.30	2020-04-16	< 1.0.0.30
CVE-2019-20731US	medium6.7	0.37% (31st)	—	1.0.0.30	2020-04-16	< 1.0.0.30
CVE-2019-20737US	medium6.7	0.35% (28th)	—	1.0.0.30	2020-04-16	< 1.0.0.30
CVE-2019-20733US	medium6.7	0.33% (26th)	—	1.0.0.30	2020-04-16	< 1.0.0.30
CVE-2019-20692US	medium6.7	0.32% (25th)	—	1.0.0.30	2020-04-16	< 1.0.0.30

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write7 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.