Pr2000 Firmware
Vendor:
First CVE: Apr 15, 2020 · Active for 6 years
42
Total CVEs
More Total CVEs than 97% of tracked products
21.0
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 60% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Pr2000 Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 15, 2020
6 years ago
Most Recent CVE
Dec 26, 2021
1,671 days ago
CVE Severity & Scoring
Pr2000 Firmware42 CVEs
26%
67%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local6 (14.3%)
Network17 (40.5%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network19 (45.2%)
Attack Complexity
Low42 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None34 (81.0%)
Unknown0 (0.0%)
Required8 (19.0%)
Privileges Required
Low9 (21.4%)
High7 (16.7%)
None26 (61.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (42 CVEs).
42 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-26908CRITICAL Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before 1.0.0.42, R6050 befo | Oct 9, 2020 | 9.8 | 30 | NO | NO |
CVE-2020-35799CRITICAL Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6200 before 1.1.00 | Dec 30, 2020 | 9.8 | 29 | NO | NO |
CVE-2017-18735HIGH Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6700v | Apr 23, 2020 | 8.8 | 28 | NO | NO |
CVE-2017-18734HIGH Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44 | Apr 23, 2020 | 8.8 | 28 | NO | NO |
CVE-2017-18737HIGH Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44 | Apr 23, 2020 | 8.8 | 27 | NO | NO |
CVE-2017-18764HIGH Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, JNR1010v | Apr 22, 2020 | 8.8 | 27 | NO | NO |
CVE-2019-20685HIGH Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6200 before 1.1.00 | Apr 16, 2020 | 8.8 | 27 | NO | NO |
CVE-2019-20684HIGH Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6200 before 1.1.00 | Apr 16, 2020 | 8.8 | 27 | NO | NO |
CVE-2019-20640HIGH Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00 | Apr 15, 2020 | 8.8 | 27 | NO | NO |
CVE-2021-45641HIGH Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 befor | Dec 26, 2021 | 8.8 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (42 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (42 CVEs).
Media Mentions
Signals from CVEs in this product scope (42 CVEs).
Top CNAs Publishing CVEs For Pr2000 Firmware
Top CWEs
Versions
No cataloged versions.