Command injection

2020-06-1817:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, RBS850 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, and RBS840 before 3.2.15.25.

CPENameOperatorVersion
rbk752_firmwarelt3.2.15.25
rbk753_firmwarelt3.2.15.25
rbk753s_firmwarelt3.2.15.25
rbk842_firmwarelt3.2.15.25
rbk852_firmwarelt3.2.15.25
rbk853_firmwarelt3.2.15.25
rbr750_firmwarelt3.2.15.25
rbr840_firmwarelt3.2.15.25
rbr850_firmwarelt3.2.15.25
rbs750_firmwarelt3.2.15.25

Name	Operator	Version
rbk752_firmware	lt	3.2.15.25
rbk753_firmware	lt	3.2.15.25
rbk753s_firmware	lt	3.2.15.25
rbk842_firmware	lt	3.2.15.25
rbk852_firmware	lt	3.2.15.25
rbk853_firmware	lt	3.2.15.25
rbr750_firmware	lt	3.2.15.25
rbr840_firmware	lt	3.2.15.25
rbr850_firmware	lt	3.2.15.25
rbs750_firmware	lt	3.2.15.25