netgear rax20 firmware

Name: netgear rax20 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

12critical10high22medium0low

updated 2026-10-28

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34991US	high8.8	5.67% (93rd)	—	1.0.4.100	2021-11-15	< 1.0.4.100
CVE-2026-11739US	medium6.4	2.55% (85th)	—	1.0.17.142	2026-08-11	< 1.0.17.142
CVE-2021-45612US	critical9.8	2.49% (85th)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45622US	critical9.8	2.37% (84th)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2026-11814US	medium6.8	2.18% (82nd)	—	1.0.17.142	2026-08-11	< 1.0.17.142
CVE-2021-45617US	critical9.8	2.06% (81st)	—	1.0.2.64	2021-12-26	< 1.0.2.64
CVE-2021-45621US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45620US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45616US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45614US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45613US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2020-35800US	critical9.4	1.61% (76th)	—	1.0.1.64	2020-12-30	< 1.0.1.64
CVE-2021-45610US	critical9.8	1.48% (74th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2022-27647US	high8.0	1.47% (74th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2021-45647US	high7.5	1.35% (71st)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2020-35796US	critical9.8	1.30% (70th)	—	1.0.1.64	2020-12-30	< 1.0.1.64
CVE-2022-27645US	high8.8OT elevated	1.28% (70th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2020-35795US	critical9.8	1.20% (68th)	—	1.0.1.64	2020-12-30	< 1.0.1.64
CVE-2021-29068US	high8.8	1.09% (65th)	—	1.0.1.64	2021-03-23	< 1.0.1.64
CVE-2020-28373US	high8.8	1.04% (64th)	—	no fix	2020-11-09	= 1.0.2.64
CVE-2021-45530US	high8.8	0.90% (59th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2021-38524US	medium4.9	0.88% (59th)	—	1.0.2.82	2021-08-11	< 1.0.2.82
CVE-2022-27642US	high8.8OT elevated	0.87% (59th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2020-35798US	high7.8	0.82% (57th)	—	1.0.1.64	2020-12-30	< 1.0.1.64
CVE-2026-11736US	medium4.9	0.77% (55th)	—	no fix	2026-08-11	—
CVE-2026-11735US	medium4.9	0.77% (55th)	—	no fix	2026-08-11	—
CVE-2021-45549US	medium6.8	0.63% (50th)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45539US	medium6.8	0.63% (50th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2021-45639US	medium6.1	0.62% (50th)	—	1.0.1.64	2021-12-26	< 1.0.1.64
CVE-2021-34982US	—	0.58% (47th)	—	1.0.4.100	2024-05-07	< 1.0.4.100
CVE-2021-45676US	medium4.8	0.49% (42nd)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2021-45674US	medium4.8	0.43% (37th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2021-45671US	medium4.8	0.43% (37th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2021-45670US	medium4.8	0.43% (37th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2021-45669US	medium4.8	0.43% (37th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2021-45668US	medium4.8	0.43% (37th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2021-45667US	medium4.8	0.43% (37th)	—	1.0.2.82	2021-12-26	< 1.0.2.82
CVE-2026-11738US	medium4.4	0.40% (34th)	—	1.0.17.142	2026-08-11	< 1.0.17.142
CVE-2021-45604US	medium4.5	0.38% (32nd)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-29073US	high8.4	0.35% (29th)	—	1.0.2.82	2021-03-23	< 1.0.2.82
CVE-2026-11737US	medium4.5	0.33% (26th)	—	1.0.18.144	2026-08-11	< 1.0.18.144
CVE-2021-34983US	—OT elevated	0.33% (26th)	—	1.0.4.100	2024-05-07	< 1.0.4.100
CVE-2026-0418US	medium4.5	0.24% (16th)	—	no fix	2026-06-09	—
CVE-2026-0417US	medium4.5	0.23% (14th)	—	1.0.18.144	2026-06-09	< 1.0.18.144
CVE-2026-0410US	medium4.5	0.22% (12th)	—	1.0.18.144	2026-06-09	< 1.0.18.144
CVE-2026-9210US	medium4.5	0.22% (12th)	—	1.0.18.144	2026-06-09	< 1.0.18.144

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')12 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')7 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-787Out-of-bounds Write7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-289Authentication Bypass by Alternate Name2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan