Command injection

2020-04-2217:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, and WNR2000v5 before 1.0.0.58.

CPENameOperatorVersion
wndr3700_firmwarelt1.0.2.88
wndr4300_firmwarelt1.0.2.90
wnr2000_firmwarelt1.0.0.58

Name	Operator	Version
wndr3700_firmware	lt	1.0.2.88
wndr4300_firmware	lt	1.0.2.90
wnr2000_firmware	lt	1.0.0.58

References

kb.netgear.com/000051494/Security-Advisory-for-Post-Authentication-Command-Injection-on-Routers-PSV-2017-0329