CVE-2018-11106

🗓️ 01 Apr 2020 16:31:45Reported by netgearType

NETGEAR pre-auth command injection fix for WC7500, WC7520, WC7600, WC9500

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2018-11106	1 Apr 202020:58	–	circl
CNVD	Command Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-35517)	2 Apr 202000:00	–	cnvd
Cvelist	CVE-2018-11106	1 Apr 202016:31	–	cvelist
EUVD	EUVD-2018-3148	7 Oct 202500:30	–	euvd
NVD	CVE-2018-11106	1 Apr 202017:15	–	nvd
Prion	Command injection	1 Apr 202017:15	–	prion

NVD

Node

netgear wc7500_firmwareRange<6.5.3.5

AND

netgear wc7500Match-

Node

netgear wc7520_firmwareRange<2.5.0.46

AND

netgear wc7520Match-

Node

netgear wc7600v1_firmwareRange<6.5.3.5

AND

netgear wc7600v1Match-

Node

netgear wc7600v2_firmwareRange<6.5.3.5

AND

netgear wc7600v2Match-

Node

netgear wc9500_firmwareRange<6.5.3.5

AND

netgear wc9500Match-

[
  {
    "product": "WC7500",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to 6.5.3.5"
      }
    ]
  },
  {
    "product": "WC7520",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to 2.5.0.46"
      }
    ]
  },
  {
    "product": "WC7600v1",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to 6.5.3.5"
      }
    ]
  },
  {
    "product": "WC7600v2",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to 6.5.3.5"
      }
    ]
  },
  {
    "product": "WC9500",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to 6.5.3.5"
      }
    ]
  }
]

Source	Link
kb	www.kb.netgear.com/000058243/Security-Advisory-for-Pre-Authentication-Command-Injection-in-request-handler-php-on-Some-Wireless-Controllers-PSV-2018-0051

21 Nov 2024 03:42Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

CVSS 210

EPSS0.02629

CWE-77