CVE-2018-21225

🗓️ 28 Apr 2020 16:37:58Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 47 Views

Certain NETGEAR devices affected by authenticated user command injection, including D7000, D7800, D8500, R6700, R6700v2, R6800, R6900, R6900P, R6900v2, R7000, R7000P, R7500v2, R7800, R8300, R8500, and R9000

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2018-21225	28 Apr 202016:37	–	cvelist
EUVD	EUVD-2018-13743	7 Oct 202500:30	–	euvd
NVD	CVE-2018-21225	28 Apr 202017:15	–	nvd
OSV	CVE-2018-21225	28 Apr 202017:15	–	osv
Prion	Command injection	28 Apr 202017:15	–	prion

NVD

Node

netgear d7800_firmwareRange<1.0.1.34

AND

netgear d7800Match-

Node

netgear d7000_firmwareRange<1.0.1.60

AND

netgear d7000Match-

Node

netgear d8500_firmwareRange<1.0.3.39

AND

netgear d8500Match-

Node

netgear r6700_firmwareRange<1.0.1.30

AND

netgear r6700Match-

Node

netgear r6700_firmwareRange<1.2.0.16

AND

netgear r6700Matchv2

Node

netgear r6800_firmwareRange<1.2.0.16

AND

netgear r6800Match-

Node

netgear r6900_firmwareRange<1.0.1.30

AND

netgear r6900Match-

Node

netgear r6900_firmwareRange<1.2.0.16

AND

netgear r6900Matchv2

Node

netgear r6900p_firmwareRange<1.2.0.22

AND

netgear r6900pMatch-

Node

netgear r7000_firmwareRange<1.0.9.12

AND

netgear r7000Match-

Node

netgear r7000p_firmwareRange<1.2.0.22

AND

netgear r7000pMatch-

Node

netgear r7500_firmwareRange<1.0.3.20

AND

netgear r7500Matchv2

Node

netgear r7800_firmwareRange<1.0.2.44

AND

netgear r7800Match-

Node

netgear r8300_firmwareRange<1.0.2.106

AND

netgear r8300Match-

Node

netgear r8500_firmwareRange<1.0.2.106

AND

netgear r8500Match-

Node

netgear r9000_firmwareRange<1.0.2.52

AND

netgear r9000Match-

Source	Link
kb	www.kb.netgear.com/000055112/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2017-2160

21 Nov 2024 04:03Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25.2

CVSS 3.16.8

CVSS 36.8

EPSS0.00136

netgear devices authenticated user command injection cve-2018-21225 security vulnerability