Command injection

2020-04-2321:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.8%

JSON

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250 before 1.0.4.8, R6300v2 before 1.0.4.6, R6400 before 1.0.1.12, R6700 before 1.0.1.16, R7000 before 1.0.7.10, R7100LG before 1.0.0.42, R7300DST before 1.0.0.44, R7900 before 1.0.1.12, R8000 before 1.0.3.36, R8300 before 1.0.2.74, R8500 before 1.0.2.74, WNDR3400v3 before 1.0.1.14, and WNR3500Lv2 before 1.2.0.48.

CPENameOperatorVersion
d6400_firmwarelt1.0.0.78
ex6200_firmwarelt1.0.3.86
ex7000_firmwarelt1.0.0.64
r6250_firmwarelt1.0.4.8
r6300_firmwarelt1.0.4.6
r6400_firmwarelt1.0.1.12
r6700_firmwarelt1.0.1.16
r7000_firmwarelt1.0.7.10
r7100lg_firmwarelt1.0.0.42
r7300dst_firmwarelt1.0.0.44

Name	Operator	Version
d6400_firmware	lt	1.0.0.78
ex6200_firmware	lt	1.0.3.86
ex7000_firmware	lt	1.0.0.64
r6250_firmware	lt	1.0.4.8
r6300_firmware	lt	1.0.4.6
r6400_firmware	lt	1.0.1.12
r6700_firmware	lt	1.0.1.16
r7000_firmware	lt	1.0.7.10
r7100lg_firmware	lt	1.0.0.42
r7300dst_firmware	lt	1.0.0.44