PatchTheCVEac2400 firmware vulnerabilities and fixes
Recent CVEs affecting ac2400 firmware, with upgrade or downgrade steps. 13 tracked.
Also searched as: ac2400firmware.
ac2400 firmware has 13 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 12. Most recent: 2022-01-25. Highest priority: CVE-2021-45501 (score 58/100).
- CVE-2021-45644 MEDIUM 6.8 UPGRADE UPGRADE Certain NETGEAR devices are affected by incorrect configuration of security settings
- CVE-2021-45534 HIGH 7.8 UPGRADE UPGRADE Certain NETGEAR devices are affected by command injection by an authenticated user
- CVE-2021-45511 MEDIUM 6.8 UPGRADE UPGRADE Certain NETGEAR devices are affected by authentication bypass
- CVE-2021-45501 CRITICAL 9.4 UPGRADE UPGRADE Certain NETGEAR devices are affected by authentication bypass
- CVE-2021-34865 HIGH 8.8 UPGRADE UPGRADE This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of mul
- CVE-2020-35800 CRITICAL 9.4 UPGRADE UPGRADE Certain NETGEAR devices are affected by incorrect configuration of security settings
- CVE-2020-35795 CRITICAL 9.8 UPGRADE UPGRADE Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
- CVE-2020-27873 MEDIUM 6.5 UPGRADE UPGRADE This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installatio
- CVE-2020-27872 HIGH 8.8 UPGRADE UPGRADE This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NET
- CVE-2020-27867 MEDIUM 6.8 UPGRADE UPGRADE This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NE
- CVE-2020-27866 HIGH 8.8 UPGRADE UPGRADE This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NET
- CVE-2020-26927 CRITICAL 9.4 UPGRADE UPGRADE Certain NETGEAR devices are affected by authentication bypass
- CVE-2019-15654 HIGH 7.5 MITIGATE Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.ph
FAQ
How do I fix ac2400 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ac2400 firmware being exploited right now?
None of the tracked ac2400 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ac2400 firmware CVE should I patch first?
CVE-2021-45501 currently ranks highest (58/100): Certain NETGEAR devices are affected by authentication bypass.