netgear rbk14 firmware

Name: netgear rbk14 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical8high1medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-27861US	high8.8	2.03% (81st)	—	2.6.1.44	2021-02-12	< 2.6.1.44
CVE-2021-27255US	high8.8OT elevated	1.40% (72nd)	—	2.7.2.104	2021-03-05	< 2.7.2.104
CVE-2021-27253US	high8.8	1.13% (66th)	—	2.7.2.104	2021-04-14	< 2.7.2.104
CVE-2021-27252US	high8.8	1.12% (66th)	—	2.7.2.104	2021-04-14	< 2.7.2.104
CVE-2021-29068US	high8.8	1.09% (65th)	—	2.6.1.44	2021-03-23	< 2.6.1.44
CVE-2021-27256US	high8.8	0.96% (61st)	—	2.7.2.104	2021-03-05	< 2.7.2.104
CVE-2021-27251US	high8.8OT elevated	0.73% (54th)	—	2.7.2.104	2021-04-14	< 2.7.2.104
CVE-2021-27254US	high8.8OT elevated	0.52% (44th)	—	2.7.2.104	2021-03-05	< 2.7.2.104
CVE-2021-27257US	medium6.5	0.32% (25th)	—	2.7.2.104	2021-03-05	< 2.7.2.104

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-259Use of Hard-coded Password1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.