netgear r7850 firmware

Name: netgear r7850 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

9critical15high3medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-27646US	high8.8	1.43% (73rd)	Exploit	1.0.5.84	2023-03-29	< 1.0.5.84
CVE-2022-27643US	high8.8	25.2% (98th)	—	1.0.5.84	2023-03-29	< 1.0.5.84
CVE-2021-40847US	high8.1OT elevated	10.0% (96th)	—	no fix	2021-09-21	= 1.0.5.68
CVE-2021-34991US	high8.8	5.67% (93rd)	—	1.0.5.76	2021-11-15	< 1.0.5.76
CVE-2021-45612US	critical9.8	2.49% (85th)	—	1.0.5.74	2021-12-26	< 1.0.5.74
CVE-2021-45622US	critical9.8	2.37% (84th)	—	1.0.5.68	2021-12-26	< 1.0.5.68
CVE-2021-45621US	critical9.8	2.02% (81st)	—	1.0.5.74	2021-12-26	< 1.0.5.74
CVE-2021-45620US	critical9.8	2.02% (81st)	—	1.0.5.74	2021-12-26	< 1.0.5.74
CVE-2021-45616US	critical9.8	2.02% (81st)	—	1.0.5.68	2021-12-26	< 1.0.5.68
CVE-2020-35800US	critical9.4	1.61% (76th)	—	1.0.5.60	2020-12-30	< 1.0.5.60
CVE-2021-45547US	high8.8	1.48% (74th)	—	1.0.5.74	2021-12-26	< 1.0.5.74
CVE-2021-45546US	high8.8	1.48% (74th)	—	1.0.5.74	2021-12-26	< 1.0.5.74
CVE-2021-45544US	high8.8	1.48% (74th)	—	1.0.5.74	2021-12-26	< 1.0.5.74
CVE-2022-27647US	high8.0	1.47% (74th)	—	1.0.5.84	2023-03-29	< 1.0.5.84
CVE-2020-35796US	critical9.8	1.30% (70th)	—	1.0.5.60	2020-12-30	< 1.0.5.60
CVE-2022-27645US	high8.8OT elevated	1.28% (70th)	—	1.0.5.84	2023-03-29	< 1.0.5.84
CVE-2020-35795US	critical9.8	1.20% (68th)	—	1.0.5.60	2020-12-30	< 1.0.5.60
CVE-2021-45527US	critical9.8	1.17% (67th)	—	1.0.5.68	2021-12-26	< 1.0.5.68
CVE-2021-29068US	high8.8	1.09% (65th)	—	1.0.5.60	2021-03-23	< 1.0.5.60
CVE-2020-28373US	high8.8	1.04% (64th)	—	no fix	2020-11-09	= 1.0.5.64
CVE-2022-27642US	high8.8OT elevated	0.87% (59th)	—	1.0.5.84	2023-03-29	< 1.0.5.84
CVE-2020-35798US	high7.8	0.82% (57th)	—	1.0.5.60	2020-12-30	< 1.0.5.60
CVE-2021-27239US	high8.8	0.77% (55th)	—	1.0.5.68	2021-03-29	< 1.0.5.68
CVE-2021-45549US	medium6.8	0.63% (50th)	—	1.0.5.68	2021-12-26	< 1.0.5.68
CVE-2021-45545US	medium6.8	0.63% (50th)	—	1.0.5.74	2021-12-26	< 1.0.5.74
CVE-2021-34982US	—	0.58% (47th)	—	1.0.5.76	2024-05-07	< 1.0.5.76
CVE-2021-45604US	medium4.5	0.38% (32nd)	—	1.0.5.68	2021-12-26	< 1.0.5.68
CVE-2022-27644US	high8.8	0.34% (27th)	—	1.0.5.84	2023-03-29	< 1.0.5.84
CVE-2021-34983US	—OT elevated	0.33% (26th)	—	1.0.5.76	2024-05-07	< 1.0.5.76

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')11 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')7 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-289Authentication Bypass by Alternate Name2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan