CVE-2018-21152
Severity CVSS v4.0:
Pending analysis
Type:
CWE-78
OS Command Injections
Publication date:
27/04/2020
Last modified:
05/05/2020
Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54.
Impact
Base Score 3.x
6.80
Severity 3.x
MEDIUM
Base Score 2.0
5.20
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:* | 1.0.1.34 (excluding) | |
cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:* | 1.0.3.26 (excluding) | |
cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:* | ||
cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:* | 1.0.2.42 (excluding) | |
cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:* | 1.0.3.10 (excluding) | |
cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:* | 1.0.3.10 (excluding) | |
cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:* | 1.0.0.54 (excluding) | |
cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:* | ||
cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:* | 1.0.0.54 (excluding) | |
cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page