Vendor scorecard
CISA lists 8 NETGEAR vulnerabilities as exploited in the wild, 0 of them added in the last 12 months (flat from 0 in the 12 months before). 0 (0%) are known to be used in ransomware campaigns. Most affected: Multiple Devices (2), DGN2200 Devices (1), Wireless Access Point (WAP) Devices (1).
| Product | KEV entries |
|---|---|
| Multiple Devices | 2 |
| DGN2200 Devices | 1 |
| Wireless Access Point (WAP) Devices | 1 |
| WNR2000v5 Router | 1 |
| Wireless Router DGN2200 | 1 |
| Multiple Routers | 1 |
| JGS516PE Devices | 1 |
| CVE | Vulnerability | Added |
|---|---|---|
| CVE-2017-5521 | NETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityMultiple Devices | |
| CVE-2017-6862 | NETGEAR Multiple Devices Buffer Overflow VulnerabilityMultiple Devices | |
| CVE-2017-6334 | NETGEAR DGN2200 Devices OS Command Injection VulnerabilityDGN2200 Devices | |
| CVE-2016-1555 | NETGEAR Multiple WAP Devices Command Injection VulnerabilityWireless Access Point (WAP) Devices | |
| CVE-2016-10174 | NETGEAR WNR2000v5 Router Buffer Overflow VulnerabilityWNR2000v5 Router | |
| CVE-2017-6077 | NETGEAR DGN2200 Remote Code Execution VulnerabilityWireless Router DGN2200 | |
| CVE-2016-6277 | NETGEAR Multiple Routers Remote Code Execution VulnerabilityMultiple Routers | |
| CVE-2020-26919 | Netgear JGS516PE Devices Missing Function Level Access Control VulnerabilityJGS516PE Devices |
Get an email when CISA adds the next NETGEAR CVE.
How to read this: CISA KEV lists vulnerabilities with reliable evidence of exploitation; a vendor with many entries is often one with a large, internet-facing install base, not necessarily worse engineering. "Publication → KEV" is the median number of days between the CVE's publication and its addition to KEV, for entries added in the last 24 months (0 entries); it is an upper bound on how long defenders had, since exploitation usually starts before the listing. Under NIS2 article 21(2)(d), supplier security is part of your risk management; this page is a starting point for that review. Compare vendors on the scorecard index.
We assess supplier security for NIS2 and DORA, from exploited-CVE history and patch response to contract clauses and evidence packs.
Get in touch →