D6400

Vendor:

First CVE: Dec 14, 2016 · Active for 9 years

52
Total CVEs
More Total CVEs than 98% of tracked products
7.4
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
3.8%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact D6400 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 14, 2016
9 years ago
Most Recent CVE
Jul 10, 2025
380 days ago

CVE Severity & Scoring

D640052 CVEs
All CVEs352,427 CVEs
LowMediumHighCritical
Attack Vector
Local12 (23.1%)
Network21 (40.4%)
Unknown0 (0.0%)
Physical1 (1.9%)
Adjacent Network18 (34.6%)
Attack Complexity
Low51 (98.1%)
High1 (1.9%)
Unknown0 (0.0%)
User Interaction
None48 (92.3%)
Unknown0 (0.0%)
Required4 (7.7%)
Privileges Required
Low7 (13.5%)
High19 (36.5%)
None26 (50.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (52 CVEs).

52 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2016-6277HIGH
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.
Dec 14, 20168.899YESYES
CVE-2017-5521HIGH
An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password d
Jan 17, 20178.198YESYES
CVE-2022-27643HIGH
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not require
Mar 29, 20238.840NONO
CVE-2021-45638CRITICAL
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0
Dec 26, 20219.831NONO
CVE-2021-45610CRITICAL
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.66, D6400 before 1.0.0.100, D7000v2 before 1.0.0.66, D8500
Dec 26, 20219.831NONO
CVE-2020-35796CRITICAL
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2
Dec 30, 20209.830NONO
CVE-2018-21162CRITICAL
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250
Apr 23, 20209.830NONO
CVE-2021-45527CRITICAL
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.66, D8500 befor
Dec 26, 20219.829NONO
CVE-2021-34991HIGH
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not require
Nov 15, 20218.829NONO
CVE-2021-38516CRITICAL
Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 befo
Aug 11, 20219.829NONO
View all 52 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (52 CVEs).

CISA KEV
2 CVEs
3.8% of CVEs· 97th percentile
Metasploit
2 CVEs
3.8% of CVEs· 96th percentile
Nuclei
2 CVEs
3.8% of CVEs· 97th percentile
ExploitDB
2 CVEs
3.8% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (52 CVEs).

Media Mentions

Signals from CVEs in this product scope (52 CVEs).

Top CNAs Publishing CVEs For D6400

Top CWEs

Versions

No cataloged versions.