netgear rax43 firmware

Name: netgear rax43 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

7critical8high16medium1low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-20167US	high8.0	7.04% (94th)	—	no fix	2021-12-30	= 1.0.3.96
CVE-2021-34991US	high8.8	5.67% (93rd)	—	1.0.4.100	2021-11-15	< 1.0.4.100
CVE-2026-11739US	medium6.4	2.55% (85th)	—	1.1.6.36	2026-08-11	< 1.1.6.36
CVE-2021-45612US	critical9.8	2.49% (85th)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45622US	critical9.8	2.37% (84th)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2026-11814US	medium6.8	2.18% (82nd)	—	1.0.17.142	2026-08-11	< 1.0.17.142
CVE-2021-20166US	high8.8	2.14% (82nd)	—	no fix	2021-12-30	= 1.0.3.96
CVE-2021-45621US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45620US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45616US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45614US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45613US	critical9.8	2.02% (81st)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2022-27647US	high8.0	1.47% (74th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2022-27645US	high8.8OT elevated	1.28% (70th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2026-11734US	low2.7	0.89% (59th)	—	1.1.6.36	2026-08-11	< 1.1.6.36
CVE-2022-27642US	high8.8OT elevated	0.87% (59th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2026-11733US	medium4.9	0.78% (56th)	—	1.1.6.36	2026-08-11	< 1.1.6.36
CVE-2026-11736US	medium4.9	0.77% (55th)	—	1.0.16.132	2026-08-11	< 1.0.16.132
CVE-2026-11735US	medium4.9	0.77% (55th)	—	1.0.16.132	2026-08-11	< 1.0.16.132
CVE-2021-45549US	medium6.8	0.63% (50th)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-34982US	—	0.58% (47th)	—	1.0.4.100	2024-05-07	< 1.0.4.100
CVE-2021-20170US	high8.8OT elevated	0.52% (44th)	—	no fix	2021-12-30	= 1.0.3.96
CVE-2026-11738US	medium4.4	0.40% (34th)	—	1.0.17.142	2026-08-11	< 1.0.17.142
CVE-2021-45604US	medium4.5	0.38% (32nd)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-20168US	medium6.8	0.34% (28th)	—	no fix	2021-12-30	= 1.0.3.96
CVE-2026-11737US	medium4.5	0.33% (26th)	—	1.1.6.36	2026-08-11	< 1.1.6.36
CVE-2021-34983US	—OT elevated	0.33% (26th)	—	1.0.4.100	2024-05-07	< 1.0.4.100
CVE-2025-12946US	high7.5	0.29% (22nd)	—	1.0.17.142	2025-12-09	< 1.0.17.142
CVE-2026-0418US	medium4.5	0.24% (16th)	—	1.0.11.112	2026-06-09	< 1.0.11.112
CVE-2026-0417US	medium4.5	0.23% (14th)	—	1.0.12.120	2026-06-09	< 1.0.12.120
CVE-2026-0410US	medium4.5	0.22% (12th)	—	1.0.16.132	2026-06-09	< 1.0.16.132
CVE-2026-9210US	medium4.5	0.22% (12th)	—	1.0.12.120	2026-06-09	< 1.0.12.120
CVE-2021-20171US	medium5.5OT elevated	0.19% (9th)	—	no fix	2021-12-30	= 1.0.3.96
CVE-2021-20169US	medium6.8OT elevated	0.18% (7th)	—	no fix	2021-12-30	= 1.0.3.96

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')10 CVEs
CWE-20Improper Input Validation8 CVEs
CWE-121Stack-based Buffer Overflow5 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-289Authentication Bypass by Alternate Name2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan