Back to feed
EUVD-2017-9864 · Published Apr 22, 2020
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55, D7800 before V1.0.1.24, EX6150v2 before 1.0.0.48, R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before V1.0.3.16, R7800 before V1.0.2.36, WNDR4300v1 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.48.
Technologies
Netgear Ex6150 FirmwareNetgear Ex6150Netgear D7800Netgear R7800Netgear Wndr4500 FirmwareNetgear R6100Netgear D6100Netgear R7500Netgear R6100 FirmwareNetgear Wndr4300Netgear D7800 FirmwareNetgear Wnr2000Netgear R7500 FirmwareNetgear D6100 FirmwareNetgear Wndr4300 FirmwareNetgear Wndr4500Netgear R7800 FirmwareNetgear Wnr2000 Firmware
Weaknesses
CWE-74
CVSS scores
- v3.16.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - v2.04.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Execution Privilege Escalation Stealth Defense Impairment
References
Potentially impacted assets
See if this affects your attack surface
