Vulnerability 198100 - CERT Civis.Net

Vulnerability Name:

CCN-198100

Published:

2020-12-23

Updated:

2020-12-23

Summary:

NETGEAR Routers, Range Extenders, and Orbi WiFi Systems could allow a remote attacker to execute arbitrary commands on the system, caused by command injection vulnerability. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system.

CVSS v3 Severity:

9.6 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
8.3 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Adjacent Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

8.3 High (CCN CVSS v2 Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Adjacent_Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: NETGEAR Web site
NETGEAR: Networking Products Made For You

Source: XF
Type: UNKNOWN
netgear-routersextender-cmd-exec(198100)

Source: CCN
Type: NETGEAR Security Advisory: PSV-2020-0211
Security Advisory for Pre-Authentication Command Injection on Some Routers, Range Extenders, and Orbi WiFi Systems

Vulnerable Configuration:

Configuration CCN 1:

cpe:/h:netgear:r6250:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:r6700:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:r6900:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:d6220:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:d6400:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:r8500:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:r8300:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:r6300:v2:*:*:*:*:*:*:*

OR cpe:/h:netgear:wndr3400:v3:*:*:*:*:*:*:*

OR cpe:/h:netgear:wnr3500l:v2:*:*:*:*:*:*:*

OR cpe:/h:netgear:wnr2000:v2:*:*:*:*:*:*:*

OR cpe:/h:netgear:d8500:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:dc112a:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:wnr1000:v3:*:*:*:*:*:*:*

OR cpe:/o:netgear:ex6150_firmware:1.0.0:*:*:*:*:*:*:*

OR cpe:/h:netgear:ex6130:-:*:*:*:*:*:*:*

OR cpe:/o:netgear:ex3800_firmware:1.0.0:*:*:*:*:*:*:*

OR cpe:/o:netgear:ex3700_firmware:1.0.0:*:*:*:*:*:*:*

OR cpe:/o:netgear:ex6120_firmware:1.0.0:*:*:*:*:*:*:*

OR cpe:/o:netgear:ex6000_firmware:1.0.0:*:*:*:*:*:*:*

OR cpe:/o:netgear:d7000v2_firmware:1.0.0:*:*:*:*:*:*:*

OR cpe:/h:netgear:dgn2200:v4:*:*:*:*:*:*:*

OR cpe:/h:netgear:r8000:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:r6400:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:r6400:v2:*:*:*:*:*:*:*

OR cpe:/h:netgear:xr300:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rbs750:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rbk842:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rbs840:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rbk852:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rbs850:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:mk62:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:mk60:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:ms60:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:cbr40:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rax45:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rax50:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rax75:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rax80:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rs400:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:rbw30:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:eax20:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:eax80:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:ex3920:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:mr60:-:*:*:*:*:*:*:*

OR cpe:/h:netgear:cbk40:-:*:*:*:*:*:*:*

Denotes that component is vulnerable