Design/Logic Flaw

2016-12-1416:59:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.975 High

EPSS

Percentile

100.0%

JSON

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

CPENameOperatorVersion
d6220_firmwarele1.0.0.22
d6400_firmwarele1.0.0.56
r6250_firmwareeq<= 1.0.4.6-10.1.12
r6400_firmwarele1.0.1.18
r6700_firmwarele1.0.1.14
r6900_firmwarele1.0.1.14
r7000_firmwareeq<= 1.0.7.2-1.1.93
r7100lg_firmwarele1.0.0.28
r7300dst_firmwarele1.0.0.46
r7900_firmwarele1.0.1.8

Name	Operator	Version
d6220_firmware	le	1.0.0.22
d6400_firmware	le	1.0.0.56
r6250_firmware	eq	<= 1.0.4.6-10.1.12
r6400_firmware	le	1.0.1.18
r6700_firmware	le	1.0.1.14
r6900_firmware	le	1.0.1.14
r7000_firmware	eq	<= 1.0.7.2-1.1.93
r7100lg_firmware	le	1.0.0.28
r7300dst_firmware	le	1.0.0.46
r7900_firmware	le	1.0.1.8