CVEvulnerability
CVE-2017-18787
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-04-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 8.4 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-74
Description
Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6050, before 1.0.1.12, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.
Affected configurations
• netgear d6200 firmware (< 1.1.00.24)
• netgear jnr1010 firmware (< 1.1.0.44)
• netgear jr6150 firmware (< 1.0.1.12)
• netgear jwnr2010 firmware (< 1.1.0.44)
• netgear pr2000 firmware (< 1.0.0.20)
• netgear r6050 firmware (< 1.0.1.12)
• netgear wnr1000 firmware (< 1.1.0.44)
• netgear wnr2020 firmware (< 1.1.0.44)
• netgear wnr2050 firmware (< 1.1.0.44)
Related
Weakness · CWE (1)
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness