First published: Tue Apr 21 2020(Updated: )
Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before 1.0.3.16, R7800 before 1.0.2.32, EX6200v2 before 1.0.1.50, and D7800 before 1.0.1.22.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear R6100 Firmware | <1.0.1.14 | |
Netgear R6100 | ||
Netgear R7500 Firmware | <1.0.0.110 | |
Netgear R7500 | ||
Netgear R7500 Firmware | <1.0.3.16 | |
Netgear R7500 | =v2 | |
NETGEAR R7800 firmware | <1.0.2.32 | |
NETGEAR R7800 | ||
Netgear Ex6200 Firmware | <1.0.1.50 | |
Netgear EX6200 | =v2 | |
Netgear D7800 Firmware | <1.0.1.22 | |
Netgear D7800 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
NETGEAR devices R6100, R7500, R7500v2, R7800, EX6200v2, and D7800 are affected by CVE-2017-18802.
CVE-2017-18802 has a severity value of 6.7 (medium).
To fix CVE-2017-18802, update your NETGEAR device's firmware to the latest version provided by the manufacturer.
You can find more information about CVE-2017-18802 in the NETGEAR security advisory at the following link: [link](https://kb.netgear.com/000049354/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-EX6200v2-and-Some-Routers-PSV-2017-2181).