CVSS 3.1
6.8 mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2018-21157
Medium (6.8) in netgear. EPSS 0.9% chance of exploitation in the next 30 days.
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R7500v2 before 1.0.3.24, R7800 before 1.0.2.38, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netgear:d7800_firmware
- netgear:r6700_firmware
- netgear:r6900_firmware
- netgear:r7000_firmware
- netgear:r7500_firmware
- netgear:r7800_firmware
- netgear:r9000_firmware
- netgear:wndr4300_firmware
- netgear:wndr4500_firmware