CVE-2018-11106
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to 6.5.3.5; WC7600v2, running firmware versions prior to 6.5.3.5; and WC9500, running firmware versions prior to 6.5.3.5.
NETGEAR presenta correcciones publicadas para una inyección de comando previa a la autenticación en una vulnerabilidad de seguridad del archivo request_handler.php en los siguientes modelos de producto: WC7500, ejecutando versiones de firmware anteriores a 6.5.3.5; WC7520, ejecutando versiones de firmware anteriores a 2.5.0.46; WC7600v1, ejecutando versiones de firmware anteriores a 6.5.3.5; WC7600v2, ejecutando versiones de firmware anteriores a 6.5.3.5; y WC9500, ejecutando versiones de firmware anteriores a 6.5.3.5.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2018-05-15 CVE Reserved
- 2020-04-01 CVE Published
- 2023-11-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://kb.netgear.com/000058243/Security-Advisory-for-Pre-Authentication-Command-Injection-in-request-handler-php-on-Some-Wireless-Controllers-PSV-2018-0051 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Wc7500 Firmware Search vendor "Netgear" for product "Wc7500 Firmware" | < 6.5.3.5 Search vendor "Netgear" for product "Wc7500 Firmware" and version " < 6.5.3.5" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wc7500 Search vendor "Netgear" for product "Wc7500" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wc7520 Firmware Search vendor "Netgear" for product "Wc7520 Firmware" | < 2.5.0.46 Search vendor "Netgear" for product "Wc7520 Firmware" and version " < 2.5.0.46" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wc7520 Search vendor "Netgear" for product "Wc7520" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wc7600v1 Firmware Search vendor "Netgear" for product "Wc7600v1 Firmware" | < 6.5.3.5 Search vendor "Netgear" for product "Wc7600v1 Firmware" and version " < 6.5.3.5" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wc7600v1 Search vendor "Netgear" for product "Wc7600v1" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wc7600v2 Firmware Search vendor "Netgear" for product "Wc7600v2 Firmware" | < 6.5.3.5 Search vendor "Netgear" for product "Wc7600v2 Firmware" and version " < 6.5.3.5" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wc7600v2 Search vendor "Netgear" for product "Wc7600v2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Wc9500 Firmware Search vendor "Netgear" for product "Wc9500 Firmware" | < 6.5.3.5 Search vendor "Netgear" for product "Wc9500 Firmware" and version " < 6.5.3.5" | - |
Affected
| in | Netgear Search vendor "Netgear" | Wc9500 Search vendor "Netgear" for product "Wc9500" | - | - |
Safe
|