Skip to content
OpenAdvisories
Unscored CVE-2018-11106 EUVD-2018-3148GHSA-r3w7-g74j-gc9f

NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following produc…

Published Apr 1, 2020 · Updated Aug 5, 2024 · Assigned by netgear

Description

NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to 6.5.3.5; WC7600v2, running firmware versions prior to 6.5.3.5; and WC9500, running firmware versions prior to 6.5.3.5.

Affected products

VendorProductAffectedFixed
NETGEAR WC7500 firmware versions prior to 6.5.3.5 —
NETGEAR WC7520 firmware versions prior to 2.5.0.46 —
NETGEAR WC7600v1 firmware versions prior to 6.5.3.5 —
NETGEAR WC7600v2 firmware versions prior to 6.5.3.5 —
NETGEAR WC9500 firmware versions prior to 6.5.3.5 —

References