Command injection

2020-04-2718:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54.

CPENameOperatorVersion
d7800_firmwarelt1.0.1.34
r7500_firmwarelt1.0.3.26
r7800_firmwarelt1.0.2.42
r8900_firmwarelt1.0.3.10
r9000_firmwarelt1.0.3.10
wndr4300_firmwarelt1.0.0.54
wndr4500_firmwarelt1.0.0.54

Name	Operator	Version
d7800_firmware	lt	1.0.1.34
r7500_firmware	lt	1.0.3.26
r7800_firmware	lt	1.0.2.42
r8900_firmware	lt	1.0.3.10
r9000_firmware	lt	1.0.3.10
wndr4300_firmware	lt	1.0.0.54
wndr4500_firmware	lt	1.0.0.54