Command injection

2021-12-2601:15:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, RBR10 before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, RBS10 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, RBK12 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22.

CPENameOperatorVersion
lbr20_firmwarelt2.6.3.50
rbk12_firmwarelt2.7.3.22
rbk20_firmwarelt2.7.3.22
rbk40_firmwarelt2.7.3.22
rbk50_firmwarelt2.7.3.22
rbr10_firmwarelt2.7.3.22
rbr20_firmwarelt2.7.3.22
rbr40_firmwarelt2.7.3.22
rbr50_firmwarelt2.7.3.22
rbs10_firmwarelt2.7.3.22

Name	Operator	Version
lbr20_firmware	lt	2.6.3.50
rbk12_firmware	lt	2.7.3.22
rbk20_firmware	lt	2.7.3.22
rbk40_firmware	lt	2.7.3.22
rbk50_firmware	lt	2.7.3.22
rbr10_firmware	lt	2.7.3.22
rbr20_firmware	lt	2.7.3.22
rbr40_firmware	lt	2.7.3.22
rbr50_firmware	lt	2.7.3.22
rbs10_firmware	lt	2.7.3.22