CVE-2018-21146: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-21146?
CVE-2018-21146 is classified as a critical vulnerability due to its potential for command injection by an authenticated user.
How do I fix CVE-2018-21146?
To fix CVE-2018-21146, users should upgrade their NETGEAR devices to the latest firmware version that addresses the vulnerability.
Which NETGEAR devices are affected by CVE-2018-21146?
CVE-2018-21146 affects NETGEAR D7800, R7800, R8900, R9000, WNDR4300v2, and WNDR4500v3 devices running specific firmware versions prior to the updates.
Can CVE-2018-21146 be exploited remotely?
CVE-2018-21146 requires authentication, so an attacker must have access to valid credentials to exploit this vulnerability.
Is there a temporary mitigation for CVE-2018-21146?
As a temporary measure, users can restrict access to the affected NETGEAR devices to trusted networks only until they can apply the firmware update.