CVE-2017-18786 Information

Description

Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24 JNR1010v2 before 1.1.0.44 JR6150 before 1.0.1.12 JWNR2010v5 before 1.1.0.44 PR2000 before 1.0.0.20 R6050 before 1.0.1.12 WNR1000v4 before 1.1.0.44 WNR2020 before 1.1.0.44 and WNR2050 before 1.1.0.44.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Reference

https://kb.netgear.com/000049529/Security-Advisory-for-Command-Injection-on-Some-Routers-PSV-2017-2949

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

7.8

Share on: