CVE-2018-21109

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Apr 23, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-211106.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211116.8Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 beCVE-2018-211126.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, R7500v2 before 1.0.3CVE-2018-211138.8Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.58, D7800 before 1CVE-2018-211146.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, EX6150v2 before 1.0.CVE-2018-211158.8NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers.CVE-2018-211168.8NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers.CVE-2018-211178.8NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler.CVE-2018-211188.8NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass.CVE-2018-211196.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.5.4 and WAC510 before 5.0CVE-2018-211208.0Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 beforeCVE-2018-211218.8Certain NETGEAR devices are affected by authentication bypass. This affects GS810EMX before 1.0.0.5, XS512EM before 1.0.0.6, and XS724EM bef
CVE-2018-21109: Medium severity, CVSS 6.8 | Vulnix