Netgear Gc108p Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Netgear Gc108p Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-40866 — CVSS 9.8 (critical): Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default)…
• CVE-2021-33514 — CVSS 8.8 (high): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library…
• CVE-2021-41314 — CVSS 8.8 (high): Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the…
• CVE-2021-40867 — CVSS 7.8 (high): Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who…
• CVE-2021-45557 — CVSS 7.5 (high): Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before…