← Back

CVE-2018-21123

nvd nist
Published: Apr 22, 2020Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WC7500 before 6.5.3.9, WC7520 before 6.5.3.9, WC7600v1 before 6.5.3.9, and WC7600v2 before 6.5.3.9.

Affected (3)

Netgear
3 products
Wc7500 Firmware
Wc7520 Firmware
Wc7600 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wc7500 Firmware
Before 6.5.3.9
Running on/withPlatform Versions
Netgear
Wc7500
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wc7520 Firmware
Before 6.5.3.9
Running on/withPlatform Versions
Netgear
Wc7520
All versions
Configuration C
1 platform
Running on/withPlatform Versions
Netgear
Wc7600
Version v1
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wc7600 Firmware
Before 6.5.3.9
Running on/withPlatform Versions
Netgear
Wc7600
Version v2

Related CWEs

CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.