Command injection

2021-12-2601:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS50Y before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22.

CPENameOperatorVersion
rbk20_firmwarelt2.7.3.22
rbk40_firmwarelt2.7.3.22
rbk50_firmwarelt2.7.3.22
rbr20_firmwarelt2.7.3.22
rbr40_firmwarelt2.7.3.22
rbr50_firmwarelt2.7.3.22
rbs20_firmwarelt2.7.3.22
rbs40_firmwarelt2.7.3.22
rbs50_firmwarelt2.7.3.22
rbs50y_firmwarelt2.7.3.22

Name	Operator	Version
rbk20_firmware	lt	2.7.3.22
rbk40_firmware	lt	2.7.3.22
rbk50_firmware	lt	2.7.3.22
rbr20_firmware	lt	2.7.3.22
rbr40_firmware	lt	2.7.3.22
rbr50_firmware	lt	2.7.3.22
rbs20_firmware	lt	2.7.3.22
rbs40_firmware	lt	2.7.3.22
rbs50_firmware	lt	2.7.3.22
rbs50y_firmware	lt	2.7.3.22