NETGEAR vulnerabilities in CISA KEV
NETGEAR has 8 vulnerabilities in CISA's catalogue of flaws known to be exploited, the 35th highest of any vendor. none were added in the last 12 months; none are linked to known ransomware use (0% of its entries, against 20.4% across the catalogue). CISA's median fix window for these entries is 21 days (range 14 to 184), against 21 days (range 1 to 184) across the whole catalogue. The most exploited product is Multiple Devices, with 2 entries. Other frequently affected products: DGN2200 Devices (1); JGS516PE Devices (1).
Catalog v2026.11.04, released 5 Nov 2026. Source CISA ↗. All KEV entries.
$ ./kev --vendor netgear --summary
Counts are computed from the catalog release on ; the 12 month window ends there.
┌─ total entries
8
in CISA KEV
┌─ first added
2021-11-03
earliest entry
┌─ latest added
2022-09-08
most recent entry
┌─ last 12 months
0
entries added
┌─ ransomware use
0 of 8
0% linked to ransomware
┌─ distinct products
7
affected products
$ awk -F, {print $1} /var/log/kev/netgear.log | uniq -c
Entries by the year CISA added them.
| Year | Entries added | Of which ransomware |
|---|---|---|
| 2021 | 1 | 0 |
| 2022 | 7 | 0 |
$ sort /var/log/kev/netgear.log | uniq -c | sort -rn | head -5
The five products with the most entries in the catalogue.
- Multiple Devices 2 entries
- DGN2200 Devices 1 entry
- JGS516PE Devices 1 entry
- Multiple Routers 1 entry
- Wireless Access Point (WAP) Devices 1 entry
$ kev-due-dates --vendor netgear
Days between the date CISA added an entry and the due date it set, median and range. Due dates apply to US federal agencies; for everyone else they are a patch-first ranking signal.
┌─ NETGEAR
21 days (range 14 to 184)
median and range in days
┌─ whole catalogue
21 days (range 1 to 184)
median and range in days
$ grep -o 'CWE-[0-9]*' /var/log/kev/netgear.log | sort | uniq -c | sort -rn | head -3
Weakness types CISA records for these entries (7 of 8 have at least one CWE).
$ grep -ril 'NETGEAR' /var/log/news | head -5
Our reporting that names NETGEAR or one of its KEV CVE ids, newest first.
┌─ /var/log/news
Patch Week pages with these entries
No Patch Week page covers this vendor yet.
$ wc -l ./netgear.kev · 8 rows
Descriptions: CISA Known Exploited Vulnerabilities catalogue
- CVE-2017-5521
Multiple Devices
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
due 2022-09-29 · CWE-200
$ cat CVE-2017-5521.txt
Description. Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
Required action. Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.
- CVE-2017-6862
Multiple Devices
NETGEAR Multiple Devices Buffer Overflow Vulnerability
due 2022-06-22 · CWE-119
$ cat CVE-2017-6862.txt
Description. Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
Required action. Apply updates per vendor instructions.
- CVE-2016-10174
WNR2000v5 Router
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
due 2022-04-15 · CWE-119
$ cat CVE-2016-10174.txt
Description. The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.
Required action. Apply updates per vendor instructions.
- CVE-2016-1555
Wireless Access Point (WAP) Devices
NETGEAR Multiple WAP Devices Command Injection Vulnerability
due 2022-04-15 · CWE-77
$ cat CVE-2016-1555.txt
Description. Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.
Required action. Apply updates per vendor instructions.
- CVE-2017-6334
DGN2200 Devices
NETGEAR DGN2200 Devices OS Command Injection Vulnerability
due 2022-04-15 · CWE-78
$ cat CVE-2017-6334.txt
Description. dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands
Required action. The impacted product is end-of-life and should be disconnected if still in use.
- CVE-2016-6277
Multiple Routers
NETGEAR Multiple Routers Remote Code Execution Vulnerability
due 2022-09-07 · CWE-352
$ cat CVE-2016-6277.txt
Description. NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
Required action. Apply updates per vendor instructions.
- CVE-2017-6077
Wireless Router DGN2200
NETGEAR DGN2200 Remote Code Execution Vulnerability
due 2022-09-07 · CWE-78
$ cat CVE-2017-6077.txt
Description. NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
Required action. Apply updates per vendor instructions.
- CVE-2020-26919
JGS516PE Devices
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
due 2022-05-03
$ cat CVE-2020-26919.txt
Description. Netgear JGS516PE devices contain a missing function level access control vulnerability.
Required action. Apply updates per vendor instructions.