CVE-2018-21114

🗓️ 22 Apr 2020 14:43:55Reported by mitreType

NETGEAR devices affected by authenticated user command injection. Affects D7800, EX6150v2, EX6100v2, EX6200v2, EX7300, EX6400, R6100, R7500, R7800, R9000, WN3000RPv2, WN3000RPv3, WNDR4300v2, WNDR4500v3 before specified versions

Reporter	Title	Published	Views	Family All 5
CNVD	Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-31331)	23 Apr 202000:00	–	cnvd
Cvelist	CVE-2018-21114	22 Apr 202014:43	–	cvelist
EUVD	EUVD-2018-13632	7 Oct 202500:30	–	euvd
NVD	CVE-2018-21114	22 Apr 202015:15	–	nvd
Prion	Command injection	22 Apr 202015:15	–	prion

NVD

Node

netgear d7800_firmwareRange<1.0.1.44

AND

netgear d7800Match-

Node

netgear ex6150_firmwareRange<1.0.1.70

AND

netgear ex6150Matchv2

Node

netgear ex6100_firmwareRange<1.0.1.70

AND

netgear ex6100Matchv2

Node

netgear ex6200_firmwareRange<1.0.1.64

AND

netgear ex6200Matchv2

Node

netgear ex7300_firmwareRange<1.0.2.136

AND

netgear ex7300Match-

Node

netgear ex6400_firmwareRange<1.0.2.136

AND

netgear ex6400Match-

Node

netgear r6100_firmwareRange<1.0.1.16

AND

netgear r6100Match-

Node

netgear r7500_firmwareRange<1.0.0.110

AND

netgear r7500Match-

Node

netgear r7800_firmwareRange<1.0.2.32

AND

netgear r7800Match-

Node

netgear r9000_firmwareRange<1.0.4.12

AND

netgear r9000Match-

Node

netgear wn3000rp_firmwareRange<1.0.0.56

AND

netgear wn3000rpMatchv2

Node

netgear wn3000rp_firmwareRange<1.0.2.52

AND

netgear wn3000rpMatchv3

Node

netgear wndr4300_firmwareRange<1.0.0.50

AND

netgear wndr4300Matchv2

Node

netgear wndr4500_firmwareRange<1.0.0.50

AND

netgear wndr4500Matchv3

Source	Link
kb	www.kb.netgear.com/000060437/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Modem-Routers-and-Wireless-Extenders-PSV-2017-0645

21 Nov 2024 04:02Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25.2

CVSS 3.16.8

CVSS 36.8

EPSS0.00136

CWE-74