Description
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETGEAR | BE9300 | < V1.0.1.84 | V1.0.1.84 |
| NETGEAR | MR60 | < V1.1.8.142 | V1.1.8.142 |
| NETGEAR | MS60 | < V1.1.8.142 | V1.1.8.142 |
| NETGEAR | R6700AX | < V1.0.18.164 | V1.0.18.164 |
| NETGEAR | RAX10 | < V1.0.5.50 | V1.0.5.50 |
| NETGEAR | RAX120 | < V1.2.10.56 | V1.2.10.56 |
| NETGEAR | RAX120v2 | < V1.2.10.56 | V1.2.10.56 |
| NETGEAR | RAX20 | < V1.0.17.142 | V1.0.17.142 |
| NETGEAR | RAX28 | < V1.0.14.108 | V1.0.14.108 |
| NETGEAR | RAX29 | < V1.0.14.108 | V1.0.14.108 |
| NETGEAR | RAX30 | < V1.0.14.108 | V1.0.14.108 |
| NETGEAR | RAX36S | < V1.0.5.50 | V1.0.5.50 |
| NETGEAR | RAX43 | < V1.0.17.142 | V1.0.17.142 |
| NETGEAR | RAX45 | < V1.0.17.142 | V1.0.17.142 |
| NETGEAR | RAX50 | < V1.0.17.142 | V1.0.17.142 |
| NETGEAR | RAX70 | < V1.0.19.172 | V1.0.19.172 |
| NETGEAR | RBR760 | < V6.3.8.11 | V6.3.8.11 |
| NETGEAR | RBS760 | < V6.3.8.11 | V6.3.8.11 |
| NETGEAR | RS100 | < V1.0.1.80 | V1.0.1.80 |
| NETGEAR | RS200 | < V1.0.1.90 | V1.0.1.90 |
| NETGEAR | RS280 | < V1.0.1.90 | V1.0.1.90 |
| NETGEAR | RS300 | < V1.0.1.90 | V1.0.1.90 |
| NETGEAR | RS500 | < V1.0.1.90 | V1.0.1.90 |
| NETGEAR | RS600 | < V1.0.1.90 | V1.0.1.90 |
| NETGEAR | RS70 | < V1.0.1.80 | V1.0.1.80 |
| NETGEAR | RS90 | < V1.0.1.80 | V1.0.1.80 |
References
- https://www.netgear.com/support/product/mr60/ product patch
- https://www.netgear.com/support/product/be9300/ product patch
- https://www.netgear.com/support/product/ms60/ product patch
- https://www.netgear.com/support/product/r6700ax/ product patch
- https://www.netgear.com/support/product/rax10/ product patch
- https://www.netgear.com/support/product/rax120/ product patch
- https://www.netgear.com/support/product/rax120v2/ product patch
- https://www.netgear.com/support/product/rax20/ product patch
- https://www.netgear.com/support/product/rax29/ product patch
- https://www.netgear.com/support/product/rax28/ product patch
- https://www.netgear.com/support/product/rax30/ product patch
- https://www.netgear.com/support/product/rax36s/ product patch
- https://www.netgear.com/support/product/rax45/ product patch
- https://www.netgear.com/support/product/rax43/ product patch
- https://www.netgear.com/support/product/rax50/ product patch
- https://www.netgear.com/support/product/rax70/ product patch
- https://www.netgear.com/support/product/rbr760/ product patch
- https://www.netgear.com/support/product/rs280/ product patch
- https://www.netgear.com/support/product/rbs760/ product patch
- https://www.netgear.com/support/product/rs200/ product patch
- https://www.netgear.com/support/product/rs300/ product patch
- https://www.netgear.com/support/product/rs100/ product patch
- https://www.netgear.com/support/product/rs70/ product patch
- https://www.netgear.com/support/product/rs600/ product patch
- https://www.netgear.com/support/product/rs500/ product patch
- https://www.netgear.com/support/product/rs90/ product patch
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory vendor-advisory patch