Certain NETGEAR devices are affected by command injection by an authenticated user
Published Apr 16, 2020
6.8
MEDIUMCVSS 3.1
EPSS 0.84%
Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D6100 before 1.0.0.63, EX2700 before 1.0.1.48, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.72, EX6400 before 1.0.2.136, EX7300 before 1.0.2.136, EX8000 before 1.0.1.180, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WN2000RPTv3 before 1.0.1.32, WN3000RPv2 before 1.0.0.68, WN3100RPv2 before 1.0.0.60, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.68, and XR500 before 2.3.2.32.
Affected products
No data.
Configuration 1
- < 1.0.0.75
Configuration 2
- < 1.0.0.75
Configuration 3
- < 1.0.0.63
Configuration 4
- < 1.0.1.48
Configuration 5
- < 1.0.1.76
Configuration 6
- < 1.0.1.76
Configuration 7
- < 1.0.1.72
Configuration 8
- < 1.0.2.136
Configuration 9
- < 1.0.2.136
Configuration 10
- < 1.0.1.180
Configuration 11
- < 1.0.2.52
Configuration 12
- < 1.0.4.2
Configuration 13
- < 1.0.4.2
Configuration 14
- < 1.0.1.32
Configuration 15
- < 1.0.0.68
Configuration 16
- < 1.0.0.60
Configuration 17
- < 1.0.2.102
Configuration 18
- < 1.0.2.104
Configuration 19
- < 1.0.0.58
Configuration 20
- < 1.0.0.58
Configuration 21
- < 1.0.0.68
Configuration 22
- < 2.3.2.32
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-11227 Advisory
- https://kb.netgear.com/000061451/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Gateways-and-Extenders-PSV-2018-0142 x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-11227 | Advisory | |
| https://kb.netgear.com/000061451/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Gateways-and-Extenders-PSV-2018-0142 | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.