CVE-2017-18787

HIGH

NETGEAR D6200/JNR1010/JR6150/JWNR2010/PR2000/R6050/WNR1000/WNR2020/WNR2050 Firmware - OS Command Injection

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6050, before 1.0.1.12, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0035
EPSS Percentile 57.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-74
Status published
Products (9)
netgear/d6200_firmware < 1.1.00.24
netgear/jnr1010_firmware < 1.1.0.44
netgear/jr6150_firmware < 1.0.1.12
netgear/jwnr2010_firmware < 1.1.0.44
netgear/pr2000_firmware < 1.0.0.20
netgear/r6050_firmware < 1.0.1.12
netgear/wnr1000_firmware < 1.1.0.44
netgear/wnr2020_firmware < 1.1.0.44
netgear/wnr2050_firmware < 1.1.0.44
Published Apr 22, 2020
Tracked Since Feb 18, 2026