Sourced tracker
NETGEAR router vulnerabilities exploited in the wild
7 NETGEAR flaws that CISA lists as actively exploited, with what NETGEAR says about each: the firmware that fixes it, or that the model is retired and will not be patched.
Exploited NETGEAR flaws, newest first
| Vulnerability | Added to KEV | Vendor status and models | Source |
|---|---|---|---|
| CVE-2017-5521NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | 8 Sep 2022 | FixedR8500, R8300, R7000, R6400, R7300DST, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, R8000, R7900, WNDR4500v2, R6200v2, WNDR3400v2, D6220, D6400, C6300Fix: per-model firmware; versions not listed Mitigation onlyR6200, R6300, VEGN2610, AC1450, WNR1000v3, WNDR3700v3, WNDR4000, WNDR4500, D6300, D6300B, DGN2200Bv4, DGN2200v4 | VendorVendor 2Read 18 Oct 2026 |
| CVE-2017-6862NETGEAR Multiple Devices Buffer Overflow Vulnerability | 8 Jun 2022 | FixedWNR2000v3, WNR2000v4, WNR2000v5, R2000Fix: per-model firmware; versions not listed | VendorRead 18 Oct 2026 |
| CVE-2017-6334NETGEAR DGN2200 Devices OS Command Injection Vulnerability | 25 Mar 2022 | FixedDGN2200v1Fix: 1.0.0.55 (reduces the risk) Replace: no fixWGR614v8, WGT624v4, WNR834Bv2, WNDR3300, WNMR834, WNR3500 | VendorVendor 2Read 18 Oct 2026 |
| CVE-2016-1555NETGEAR Multiple WAP Devices Command Injection Vulnerability | 25 Mar 2022 | FixedWN604, WNAP210v2, WNAP320, WNDAP350, WNDAP360, WNDAP660Fix: WN604 3.3.3; others 3.5.5.0 | VendorRead 18 Oct 2026 |
| CVE-2016-10174NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 25 Mar 2022 | FixedD6100, D7000, D7800, JNR1010v2, JNR3300, JWNR2010v5, R2000, R6100, R6220, R7500, R7500v2, WNDR3700v4, WNDR3800, WNDR4300, WNDR4300v2, WNDR4500v3, WNDR4700, WNR1000v2, WNR1000v4, WNR2000v3, WNR2000v4, WNR2000v5, WNR2020, WNR2050, WNR2200, WNR2500, WNR614, WNR618Fix: per-model firmware; versions not listed | VendorRead 18 Oct 2026 |
| CVE-2017-6077NETGEAR DGN2200 Remote Code Execution Vulnerability | 7 Mar 2022 | FixedDGN2200v1Fix: 1.0.0.55 | VendorRead 18 Oct 2026 |
| CVE-2016-6277NETGEAR Multiple Routers Remote Code Execution Vulnerability | 7 Mar 2022 | FixedR6250, R6400, R6700, R6900, R7000, R7100LG, R7300DST, R7900, R8000, D6220, D6400Fix: per-model firmware; versions not listed | VendorRead 18 Oct 2026 |
Is your NETGEAR model still supported?
NETGEAR's end-of-service list (Australian page, which lists models in plain HTML).
NETGEAR end-of-life list Read 18 Oct 2026
What to do
- Find the model and hardware version on the label under the router.
- If the row says fixed, install that firmware or newer from NETGEAR’s own support site.
- If it says replace, the vendor will not patch it: a router exposed to the internet with a flaw attackers already use should be taken offline and replaced.
- Turn off remote management from the internet unless you need it.
How this list is kept
- A row appears when CISA adds the flaw to its Known Exploited Vulnerabilities catalog: attackers are using it, not just able to. We copy CISA’s entry and re-check the catalog every week.
- The vendor status comes from the vendor’s own advisory or end-of-life notice, tied to a short sentence on that page that a script re-reads weekly.
- “Replace: no fix” means the vendor has said the model will not be patched. A router in that state stays open to the flaw for as long as it is online.
- Check the exact model and hardware version on the label under the router; vendors often fix one hardware version and retire another.
Other brands: ASUS · Cisco Small Business · D-Link · DrayTek · MikroTik · Tenda · TP-Link · Ubiquiti · Zyxel · All routers