Command injection

2021-12-2601:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.

CPENameOperatorVersion
rax200_firmwarelt1.0.4.120
rax75_firmwarelt1.0.4.120
rax80_firmwarelt1.0.4.120
rbk852_firmwarelt3.2.17.12
rbr850_firmwarelt3.2.17.12
rbs850_firmwarelt3.2.17.12

Name	Operator	Version
rax200_firmware	lt	1.0.4.120
rax75_firmware	lt	1.0.4.120
rax80_firmware	lt	1.0.4.120
rbk852_firmware	lt	3.2.17.12
rbr850_firmware	lt	3.2.17.12
rbs850_firmware	lt	3.2.17.12