NetSight
medium6.8

CVE-2018-21154

Certain NETGEAR devices are affected by command injection by an authenticated user.

Impact

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, and R7800 before 1.0.2.42.

Affected products

VendorProductAffected versions
NetgearD7800 Firmware
before 1.0.1.34
NetgearDm200 Firmware
before 1.0.0.50
NetgearR6100 Firmware
before 1.0.1.22
NetgearR7500 Firmware
before 1.0.0.122
before 1.0.3.26
NetgearR7800 Firmware
before 1.0.2.42

Weakness classification

References