CVE-2018-21208
published 2020-04-28CVE-2018-21208: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7500v2…
high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7500v2 before 1.0.3.24, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| netgear | d6100_firmware | < 1.0.0.57 | 1.0.0.57 |
| netgear | r6100_firmware | < 1.0.1.20 | 1.0.1.20 |
| netgear | r7500_firmware | < 1.0.3.24 | 1.0.3.24 |
| netgear | wndr4300_firmware | < 1.0.0.50 | 1.0.0.50 |
| netgear | wndr4500_firmware | < 1.0.0.50 | 1.0.0.50 |