CVE-2017-18801

Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.48, and D7000 before 1.0.1.50.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
mitreCNA
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
VendorProductVersion
netgearr6220_firmware
𝑥
< 1.1.0.50
netgearr6700_firmware
𝑥
< 1.1.0.38
netgearr6800_firmware
𝑥
< 1.1.0.38
netgearwndr3700_firmware
𝑥
< 1.1.0.48
netgeard7000_firmware
𝑥
< 1.0.1.50
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://kb.netgear.com/000049355/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-2151
https://kb.netgear.com/000049355/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-2151