Command injection

2021-12-2601:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.

CPENameOperatorVersion
cbr750_firmwarelt4.6.3.6
rbk752_firmwarelt3.2.17.12
rbk852_firmwarelt3.2.17.12
rbr750_firmwarelt3.2.17.12
rbr850_firmwarelt3.2.17.12
rbs750_firmwarelt3.2.17.12
rbs850_firmwarelt3.2.17.12

Name	Operator	Version
cbr750_firmware	lt	4.6.3.6
rbk752_firmware	lt	3.2.17.12
rbk852_firmware	lt	3.2.17.12
rbr750_firmware	lt	3.2.17.12
rbr850_firmware	lt	3.2.17.12
rbs750_firmware	lt	3.2.17.12
rbs850_firmware	lt	3.2.17.12