r8500 firmware vulnerabilities and fixes

Recent CVEs affecting r8500 firmware, with upgrade or downgrade steps. 25 tracked.

Also searched as: r8500firmware.

r8500 firmware has 25 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-11-05. Highest priority: CVE-2024-52019 (score 47/100).

• CVE-2024-52022 HIGH 8.0 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
• CVE-2024-52021 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parame
• CVE-2024-52020 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parame
• CVE-2024-52019 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parame
• CVE-2024-52016 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multip
• CVE-2024-52015 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
• CVE-2024-52014 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
• CVE-2024-52013 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
• CVE-2024-51012 MEDIUM 5.7 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_pri_dns parameter at ipv6_fix
• CVE-2024-51010 HIGH 8.0 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
• CVE-2024-51009 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parame
• CVE-2024-51006 MEDIUM 5.7 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_static_ip parameter in the ip
• CVE-2024-51005 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the share_name paramet
• CVE-2024-51004 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in t
• CVE-2024-51003 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multip
• CVE-2024-51002 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
• CVE-2024-51001 MEDIUM 5.7 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi
• CVE-2024-51000 MEDIUM 5.7 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wi
• CVE-2024-50999 MEDIUM 5.7 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd param
• CVE-2024-50998 MEDIUM 5.7 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component op
• CVE-2024-50997 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
• CVE-2024-50996 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
• CVE-2024-50995 MEDIUM 5.7 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote
• CVE-2024-50994 MEDIUM 5.7 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ip
• CVE-2024-50993 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd param

FAQ

How do I fix r8500 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is r8500 firmware being exploited right now?

None of the tracked r8500 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which r8500 firmware CVE should I patch first?

CVE-2024-52019 currently ranks highest (47/100): Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parame.

RSS feed for r8500 firmware · ← Back to latest CVEs