PT-2020-8871 · NetGear · Netgear R7800+9
Published
2020-04-24
·
Updated
2020-05-01
·
CVE-2018-21227
CVSS v3.1
6.8
Medium
| Vector | AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N |
Name of the Vulnerable Software and Affected Versions
NETGEAR D7800 versions prior to 1.0.1.34
NETGEAR R6400v2 versions prior to 1.0.2.34
NETGEAR R6700 versions prior to 1.0.1.30
NETGEAR R6900 versions prior to 1.0.1.30
NETGEAR R6900P versions prior to 1.0.0.62
NETGEAR R7000 versions prior to 1.0.9.12
NETGEAR R7000P versions prior to 1.0.0.62
NETGEAR R7500v2 versions prior to 1.0.3.26
NETGEAR R7800 versions prior to 1.0.2.42
NETGEAR R9000 versions prior to 1.0.3.10
NETGEAR WNDR4300v2 versions prior to 1.0.0.50
NETGEAR WNDR4500v3 versions prior to 1.0.0.50
Description
The issue allows command injection by an authenticated user.
Recommendations
For D7800, update to version 1.0.1.34 or later.
For R6400v2, update to version 1.0.2.34 or later.
For R6700, update to version 1.0.1.30 or later.
For R6900, update to version 1.0.1.30 or later.
For R6900P, update to version 1.0.0.62 or later.
For R7000, update to version 1.0.9.12 or later.
For R7000P, update to version 1.0.0.62 or later.
For R7500v2, update to version 1.0.3.26 or later.
For R7800, update to version 1.0.2.42 or later.
For R9000, update to version 1.0.3.10 or later.
For WNDR4300v2, update to version 1.0.0.50 or later.
For WNDR4500v3, update to version 1.0.0.50 or later.
Fix
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Netgear R7800
Netgear R6400V2
Netgear R6700
Netgear R6900P
Netgear R7000
Netgear R7000P
Netgear R7500V2
Netgear R9000
Netgear Wndr4300V2
Netgear Wndr4500V3