PT-2020-8343 · NetGear · Netgear R6300V2+8
Published
2020-04-21
·
Updated
2020-04-24
·
CVE-2017-18794
CVSS v3.1
8.4
High
| Vector | AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N |
Name of the Vulnerable Software and Affected Versions:
NETGEAR R6300v2 versions prior to 1.0.4.8 10.0.77
NETGEAR R6400 versions prior to 1.0.1.24
NETGEAR R6700 versions prior to 1.0.1.26
NETGEAR R7000 versions prior to 1.0.9.10
NETGEAR R7100LG versions prior to 1.0.0.32
NETGEAR R7900 versions prior to 1.0.1.18
NETGEAR R8000 versions prior to 1.0.3.54
NETGEAR R8500 versions prior to 1.0.2.100
NETGEAR D6100 versions prior to 1.0.0.50 0.0.50
Description:
Certain NETGEAR devices are affected by command injection.
Recommendations:
For R6300v2 versions prior to 1.0.4.8 10.0.77, update to version 1.0.4.8 10.0.77 or later.
For R6400 versions prior to 1.0.1.24, update to version 1.0.1.24 or later.
For R6700 versions prior to 1.0.1.26, update to version 1.0.1.26 or later.
For R7000 versions prior to 1.0.9.10, update to version 1.0.9.10 or later.
For R7100LG versions prior to 1.0.0.32, update to version 1.0.0.32 or later.
For R7900 versions prior to 1.0.1.18, update to version 1.0.1.18 or later.
For R8000 versions prior to 1.0.3.54, update to version 1.0.3.54 or later.
For R8500 versions prior to 1.0.2.100, update to version 1.0.2.100 or later.
For D6100 versions prior to 1.0.0.50 0.0.50, update to version 1.0.0.50 0.0.50 or later.
Fix
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Netgear R6100
Netgear R6300V2
Netgear R6400
Netgear R6700
Netgear R7000
Netgear R7100Lg
Netgear R7900
Netgear R8000
Netgear R8500