CVE-2018-21112: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, and R9000 before 1.0.4.12.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-21112?
CVE-2018-21112 is considered a high-severity vulnerability due to its command injection nature which can be exploited by authenticated users.
How do I fix CVE-2018-21112?
To fix CVE-2018-21112, upgrade your NETGEAR device to the latest firmware version as specified for each affected model.
Which NETGEAR devices are affected by CVE-2018-21112?
CVE-2018-21112 affects NETGEAR D7800, R7500v2, R7800, R8900, and R9000 models before their respective firmware versions.
Can CVE-2018-21112 be exploited remotely?
No, CVE-2018-21112 requires authenticated access to be exploited, making it less of a risk from external threats.
What type of vulnerability is CVE-2018-21112?
CVE-2018-21112 is a command injection vulnerability that allows authenticated users to execute arbitrary commands on affected devices.