Rax43
Vendor:
First CVE: Nov 15, 2021 · Active for 4 years
26
Total CVEs
More Total CVEs than 95% of tracked products
5.2
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Rax43 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 15, 2021
4 years ago
Most Recent CVE
Jun 9, 2026
48 days ago
CVE Severity & Scoring
Rax4326 CVEs
38%
35%
27%
All CVEs352,727 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (3.8%)
Network8 (30.8%)
Unknown0 (0.0%)
Physical2 (7.7%)
Adjacent Network15 (57.7%)
Attack Complexity
Low25 (96.2%)
High1 (3.8%)
Unknown0 (0.0%)
User Interaction
None26 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low4 (15.4%)
High6 (23.1%)
None16 (61.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (26 CVEs).
26 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-20167HIGH Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter. | Dec 30, 2021 | 8.0 | 40 | NO | YES |
CVE-2021-45622CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 be | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45621CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20 before 1.0.0.58, EAX80 b | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45620CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 be | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45616CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 be | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45614CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 b | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45613CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2 before 1.0.0.74, LAX20 | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45612CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 be | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-34991HIGH This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not require | Nov 15, 2021 | 8.8 | 29 | NO | NO |
CVE-2021-20170HIGH Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact | Dec 30, 2021 | 8.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (26 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
3.8% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (26 CVEs).
Media Mentions
Signals from CVEs in this product scope (26 CVEs).
Top CNAs Publishing CVEs For Rax43
Top CWEs
Versions
No cataloged versions.