netgear xr300 firmware

Name: netgear xr300 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

16critical9high2medium0low

updated 2026-10-28

vulnerabilities (57)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-27643US	high8.8	25.2% (98th)	—	1.0.3.72	2023-03-29	< 1.0.3.72
CVE-2021-34991US	high8.8	5.67% (93rd)	—	1.0.3.68	2021-11-15	< 1.0.3.68
CVE-2022-40619US	—	2.53% (85th)	—	1.0.3.72	2026-01-28	< 1.0.3.72
CVE-2021-45612US	critical9.8	2.49% (85th)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2021-45622US	critical9.8	2.37% (84th)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2021-45617US	critical9.8	2.06% (81st)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2021-45621US	critical9.8	2.02% (81st)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2021-45620US	critical9.8	2.02% (81st)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2021-38528US	critical9.8	1.99% (80th)	—	1.0.3.56	2021-08-11	< 1.0.3.56
CVE-2021-45624US	critical9.8	1.69% (77th)	—	1.0.3.56	2021-12-26	< 1.0.3.56
CVE-2021-45625US	critical9.8	1.67% (77th)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2024-52018US	—	1.64% (76th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2020-35800US	critical9.4	1.61% (76th)	—	1.0.3.50	2020-12-30	< 1.0.3.50
CVE-2021-45610US	critical9.8	1.48% (74th)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2020-35796US	critical9.8	1.30% (70th)	—	1.0.3.50	2020-12-30	< 1.0.3.50
CVE-2021-45611US	critical9.8	1.24% (69th)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2021-45609US	critical9.8	1.24% (69th)	—	1.0.3.68	2021-12-26	< 1.0.3.68
CVE-2020-35795US	critical9.8	1.20% (68th)	—	1.0.3.50	2020-12-30	< 1.0.3.50
CVE-2021-45527US	critical9.8	1.17% (67th)	—	1.0.3.56	2021-12-26	< 1.0.3.56
CVE-2021-29068US	high8.8	1.09% (65th)	—	1.0.3.50	2021-03-23	< 1.0.3.50
CVE-2020-28373US	high8.8	1.04% (64th)	—	no fix	2020-11-09	= 1.0.3.50_10.3.36
CVE-2024-52022US	—	1.00% (63rd)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-51010US	—	0.96% (61st)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-51008US	—	0.96% (61st)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2023-36499US	high8.8	0.96% (61st)	—	no fix	2023-08-07	= 1.0.3.78
CVE-2024-51021US	—	0.85% (58th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2020-35798US	high7.8	0.82% (57th)	—	1.0.3.50	2020-12-30	< 1.0.3.50
CVE-2021-27239US	high8.8	0.77% (55th)	—	1.0.3.56	2021-03-29	< 1.0.3.56
CVE-2021-38517US	high7.2	0.76% (55th)	—	1.0.3.50	2021-08-11	< 1.0.3.50
CVE-2021-45639US	medium6.1	0.62% (50th)	—	1.0.3.50	2021-12-26	< 1.0.3.50
CVE-2021-45605US	high8.8	0.60% (49th)	—	1.0.3.50	2021-12-26	< 1.0.3.50
CVE-2021-34982US	—	0.58% (47th)	—	1.0.3.68	2024-05-07	< 1.0.3.68
CVE-2021-45512US	critical9.8OT elevated	0.56% (47th)	—	1.0.3.50	2021-12-26	< 1.0.3.50
CVE-2020-13245US	medium5.9	0.50% (43rd)	—	no fix	2020-05-28	v1.0.9.6_1.2.19 → v1.0.11.100_10.2.100
CVE-2024-52017US	—	0.42% (36th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-52016US	—	0.41% (35th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-50997US	—	0.40% (35th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-50996US	—	0.40% (35th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2025-52082US	—	0.34% (27th)	—	no fix	2025-07-15	= 1.0.3.38
CVE-2025-52081US	—	0.34% (27th)	—	no fix	2025-07-15	= 1.0.3.38
CVE-2025-52080US	—	0.34% (27th)	—	no fix	2025-07-15	= 1.0.3.38
CVE-2021-34983US	—OT elevated	0.33% (26th)	—	1.0.3.68	2024-05-07	< 1.0.3.68
CVE-2022-40620US	—	0.32% (24th)	—	1.0.3.72	2026-01-28	< 1.0.3.72
CVE-2024-52026US	—	0.31% (24th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-52025US	—	0.31% (24th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-52024US	—	0.31% (24th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-52023US	—	0.31% (24th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-51002US	—	0.31% (24th)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-52015US	—	0.30% (23rd)	—	no fix	2024-11-05	= 1.0.3.78
CVE-2024-52014US	—	0.30% (23rd)	—	no fix	2024-11-05	= 1.0.3.78

showing 50 of 57

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')29 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')11 CVEs
CWE-121Stack-based Buffer Overflow6 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE57 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan