PT-2020-8351

CVE-2017-18802

·

Published

2020-04-21

·

Updated

2020-04-23

Description by

CVSS 3.1
6.7
Medium
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: NETGEAR R6100 versions prior to 1.0.1.14 NETGEAR R7500 versions prior to 1.0.0.110 NETGEAR R7500v2 versions prior to 1.0.3.16 NETGEAR R7800 versions prior to 1.0.2.32 NETGEAR EX6200v2 versions prior to 1.0.1.50 NETGEAR D7800 versions prior to 1.0.1.22
Description: The issue is related to command injection, affecting certain NETGEAR devices.
Recommendations: For R6100 version prior to 1.0.1.14, update to version 1.0.1.14 or later. For R7500 version prior to 1.0.0.110, update to version 1.0.0.110 or later. For R7500v2 version prior to 1.0.3.16, update to version 1.0.3.16 or later. For R7800 version prior to 1.0.2.32, update to version 1.0.2.32 or later. For EX6200v2 version prior to 1.0.1.50, update to version 1.0.1.50 or later. For D7800 version prior to 1.0.1.22, update to version 1.0.1.22 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾