Command Injection in NETGEAR R7800 Devices Prior to Version 1.0.2.60
CVE-2018-21110

6.8MEDIUM

Key Information:

Vendor
Netgear
Status
R7800 Firmware
Vendor
CVE Published:
23 April 2020

Summary

NETGEAR R7800 devices prior to version 1.0.2.60 are susceptible to a command injection vulnerability that can be exploited by authenticated users. This flaw enables attackers to execute arbitrary commands on the device, potentially compromising its integrity and security. Users are advised to upgrade their firmware to the latest version to mitigate this risk. For further information, refer to the official security advisory.

References

https://kb.netgear.com/000060441/Security-Advisory-for-a-...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.