Netgear Gs728tp Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Netgear Gs728tp Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2021-40866 — CVSS 9.8 (critical): Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default)…
• CVE-2019-20697 — CVSS 8.8 (high): Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS728TPPv2 before…
• CVE-2021-33514 — CVSS 8.8 (high): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library…
• CVE-2021-41314 — CVSS 8.8 (high): Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the…
• CVE-2021-40867 — CVSS 7.8 (high): Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who…
• CVE-2019-20694 — CVSS 7.5 (high): Certain NETGEAR devices are affected by disclosure of sensitive information. This affects GS728TP before 6.0.0.48, GS728TPPv2 before…