Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, R6020 before 1.0.0.34, R6080 before 1.0.0.34, R6120 before 1.0.0.44, R6220 before 1.1.0.80, R6230 before 1.1.0.80, R6250 before 1.0.4.34, R6260 before 1.1.0.40, R6850 before 1.1.0.40, R6350 before 1.1.0.40, R6400v2 before 1.0.2.62, R6700v3 before 1.0.2.62, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, R7000 before 1.0.9.34, R6900P before 1.3.1.44, R7000P before 1.3.1.44, R7100LG before 1.0.0.48, R7200 before 1.2.0.48, R7350 before 1.2.0.48, R7400 before 1.2.0.48, R7450 before 1.2.0.36, AC2100 before 1.2.0.36, AC2400 before 1.2.0.36, AC2600 before 1.2.0.36, R7500v2 before 1.0.3.38, R7800 before 1.0.2.58, R7900 before 1.0.3.8, R7960P before 1.4.1.44, R8000 before 1.0.4.28, R7900P before 1.4.1.30, R8000P before 1.4.1.30, R8900 before 1.0.4.2, R9000 before 1.0.4.2, RAX120 before 1.0.0.74, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, WNR3500Lv2 before 1.2.0.56, XR450 before 2.3.2.32, and XR500 before 2.3.2.32.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HNetgear Ac2100
HWNetgearall versionsNetgear Ac2100 Firmware
OSNetgear< 1.2.0.36Netgear Ac2400
HWNetgearall versionsNetgear Ac2400 Firmware
OSNetgear< 1.2.0.36Netgear Ac2600
HWNetgearall versionsNetgear Ac2600 Firmware
OSNetgear< 1.2.0.36Netgear D6220
HWNetgearall versionsNetgear D6220 Firmware
OSNetgear< 1.0.0.48Netgear D6400
HWNetgearall versionsNetgear D6400 Firmware
OSNetgear< 1.0.0.82Netgear D7000
HWNetgearv2Netgear D7000 Firmware
OSNetgear< 1.0.0.52Netgear D7800
HWNetgearall versionsNetgear D7800 Firmware
OSNetgear< 1.0.1.44Netgear D8500
HWNetgearall versionsNetgear D8500 Firmware
OSNetgear< 1.0.3.43Netgear Dc112a
HWNetgearall versionsNetgear Dc112a Firmware
OSNetgear< 1.0.0.40Netgear Dgn2200
HWNetgearv4Netgear Dgn2200 Firmware
OSNetgear< 1.0.0.108Netgear R6020
HWNetgearall versionsNetgear R6020 Firmware
OSNetgear< 1.0.0.34Netgear R6080
HWNetgearall versionsNetgear R6080 Firmware
OSNetgear< 1.0.0.34Netgear R6120
HWNetgearall versionsNetgear R6120 Firmware
OSNetgear< 1.0.0.44Netgear R6220
HWNetgearall versionsNetgear R6220 Firmware
OSNetgear< 1.1.0.80Netgear R6230
HWNetgearall versionsNetgear R6230 Firmware
OSNetgear< 1.1.0.80
Related vulnerabilities
Command injection w NETGEAR DGN2200 przez ping.cgi
Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia
OS command injection w Netgear DC112A — zdalne wykonanie poleceń
Command injection w Netgear R6850 poprzez parametr c4-IPAddr
Buffer Overflow w NETGEAR R6400v2 — zdalne wykonanie kodu bez uwierzytelnienia