PT-2020-8316 · NetGear · R6700+13

Fmast

·

Published

2020-04-22

·

Updated

2020-04-24

·

CVE-2017-18767

CVSS v3.1

6.8

Medium

VectorAV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: NETGEAR D7800 versions prior to 1.0.1.34 NETGEAR D8500 versions prior to 1.0.3.39 NETGEAR R6400 versions prior to 1.0.1.14 NETGEAR R6400v2 versions prior to 1.0.2.32 NETGEAR R6700 versions prior to 1.0.1.22 NETGEAR R6900 versions prior to 1.0.1.22 NETGEAR R7000 versions prior to 1.0.9.4 NETGEAR R7100LG versions prior to 1.0.0.32 NETGEAR R7300 versions prior to 1.0.0.56 NETGEAR R7800 versions prior to 1.0.2.36 NETGEAR R7900 versions prior to 1.0.2.10 NETGEAR R8000 versions prior to 1.0.3.24 NETGEAR R8300 versions prior to 1.0.2.74 NETGEAR R8500 versions prior to 1.0.2.74
Description: Certain NETGEAR devices are affected by command injection by an authenticated user.
Recommendations: Update D7800 to version 1.0.1.34 or later Update D8500 to version 1.0.3.39 or later Update R6400 to version 1.0.1.14 or later Update R6400v2 to version 1.0.2.32 or later Update R6700 to version 1.0.1.22 or later Update R6900 to version 1.0.1.22 or later Update R7000 to version 1.0.9.4 or later Update R7100LG to version 1.0.0.32 or later Update R7300 to version 1.0.0.56 or later Update R7800 to version 1.0.2.36 or later Update R7900 to version 1.0.2.10 or later Update R8000 to version 1.0.3.24 or later Update R8300 to version 1.0.2.74 or later Update R8500 to version 1.0.2.74 or later

Fix

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2017-18767

Affected Products

D7800
D8500
R6400
R6400V2
R6700
R6900
R7000
R7100Lg
R7300
R7800
R7900
R8000
R8300
R8500