CVE-2018-21228

MEDIUM

NETGEAR Multiple Models - Authenticated Command Injection

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, EX6100v2 before 1.0.1.50, EX6150v2 before 1.0.1.50, EX6200v2 before 1.0.1.44, EX6400 before 1.0.1.60, EX7300 before 1.0.1.60, R6100 before 1.0.1.16, R7500 before 1.0.0.110, R7800 before 1.0.2.32, R9000 before 1.0.2.30, WN3000RPv3 before 1.0.2.50, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.

References (1)

Core 1

Scores

CVSS v3 6.8
EPSS 0.0014
EPSS Percentile 33.0%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-74
Status published
Products (13)
netgear/d7800_firmware < 1.0.1.34
netgear/ex6100_firmware < 1.0.1.50
netgear/ex6150_firmware < 1.0.1.50
netgear/ex6200_firmware < 1.0.1.44
netgear/ex6400_firmware < 1.0.1.60
netgear/ex7300_firmware < 1.0.1.60
netgear/r6100_firmware < 1.0.1.16
netgear/r7500_firmware < 1.0.0.110
netgear/r7800_firmware < 1.0.2.32
netgear/r9000_firmware < 1.0.2.30
... and 3 more
Published Apr 24, 2020
Tracked Since Feb 18, 2026