Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.134, EX7700 before 1.0.0.216, EX8000 before 1.0.1.232, LBR1020 before 2.6.3.58, LBR20 before 2.6.3.50, R7800 before 1.0.2.80, R8900 before 1.0.5.26, R9000 before 1.0.5.26, RBS50Y before 2.7.3.22, WNR2000v5 before 1.0.0.76, XR700 before 1.0.1.36, EX6150v2 before 1.0.1.98, EX7300 before 1.0.2.158, EX7320 before 1.0.0.134, RAX10 before 1.0.2.88, RAX120 before 1.2.0.16, RAX70 before 1.0.2.88, EX6100v2 before 1.0.1.98, EX6400 before 1.0.2.158, EX7300v2 before 1.0.0.134, R6700AX before 1.0.2.88, RAX120v2 before 1.2.0.16, RAX78 before 1.0.2.88, EX6410 before 1.0.0.134, RBR10 before 2.7.3.22, RBR20 before 2.7.3.22, RBR350 before 4.3.4.7, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, EX6420 before 1.0.0.134, RBS10 before 2.7.3.22, RBS20 before 2.7.3.22, RBS350 before 4.3.4.7, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, EX6400v2 before 1.0.0.134, RBK12 before 2.7.3.22, RBK20 before 2.7.3.22, RBK352 before 4.3.4.7, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HNetgear Ex6100v2
HWNetgearall versionsNetgear Ex6100v2 Firmware
OSNetgear< 1.0.1.98Netgear Ex6150v2
HWNetgearall versionsNetgear Ex6150v2 Firmware
OSNetgear< 1.0.1.98Netgear Ex6200v2
HWNetgearall versionsNetgear Ex6200v2 Firmware
OSNetgear< 1.0.1.86Netgear Ex6250
HWNetgearall versionsNetgear Ex6250 Firmware
OSNetgear< 1.0.0.134Netgear Ex6400
HWNetgearall versionsNetgear Ex6400 Firmware
OSNetgear< 1.0.2.158Netgear Ex6400v2
HWNetgearall versionsNetgear Ex6400v2 Firmware
OSNetgear< 1.0.0.134Netgear Ex6410
HWNetgearall versionsNetgear Ex6410 Firmware
OSNetgear< 1.0.0.134Netgear Ex6420
HWNetgearall versionsNetgear Ex6420 Firmware
OSNetgear< 1.0.0.134Netgear Ex7300
HWNetgearall versionsNetgear Ex7300 Firmware
OSNetgear< 1.0.2.158Netgear Ex7300v2
HWNetgearall versionsNetgear Ex7300v2 Firmware
OSNetgear< 1.0.0.134Netgear Ex7320
HWNetgearall versionsNetgear Ex7320 Firmware
OSNetgear< 1.0.0.134Netgear Ex7700
HWNetgearall versionsNetgear Ex7700 Firmware
OSNetgear< 1.0.0.216Netgear Ex8000
HWNetgearall versionsNetgear Ex8000 Firmware
OSNetgear< 1.0.1.232Netgear Lbr1020
HWNetgearall versionsNetgear Lbr1020 Firmware
OSNetgear< 2.6.3.58Netgear Lbr20
HWNetgearall versionsNetgear Lbr20 Firmware
OSNetgear< 2.6.3.50
Related vulnerabilities
Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia
Command injection w Netgear EX8000 via funkcja switch_status
Command Injection w Netgear EX8000 via parametr Iface (action_wireless)
NETGEAR RBK352/RBR350/RBS350 — zakodowane hasło (hardcoded password)
NETGEAR — unauthenticated command injection w routerach i extenderach