Command Injection Vulnerability in NETGEAR Routers Impacting Multiple Models
CVE-2017-18801
6.7MEDIUM
Summary
Certain NETGEAR routers are susceptible to a command injection vulnerability, allowing attackers to execute arbitrary commands on the affected devices. This vulnerability impacts specific models of NETGEAR routers that are running outdated firmware versions. Users are advised to update their devices to the latest firmware to mitigate the risk of exploitation and enhance their network security. Further details and guidance can be found in the NETGEAR security advisory.
References
CVSS V3.1
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved