Command injection vulnerability in some NETGEAR Nighthawk devices
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| NETGEAR | MR60 | unaffected |
|
||||||
| NETGEAR | MR70 | unaffected |
|
||||||
| NETGEAR | MR90 | unaffected |
|
||||||
| NETGEAR | MS60 | unaffected |
|
||||||
| NETGEAR | MS70 | unaffected |
|
||||||
| NETGEAR | MS90 | unaffected |
|
||||||
| NETGEAR | RAX20 | unaffected |
|
||||||
| NETGEAR | RAX200 | unaffected |
|
||||||
| NETGEAR | RAX35 | unaffected |
|
||||||
| NETGEAR | RAX35v2 | unaffected |
|
||||||
| NETGEAR | RAX41 | unaffected |
|
||||||
| NETGEAR | RAX41v2 | unaffected |
|
||||||
| NETGEAR | RAX42 | unaffected |
|
||||||
| NETGEAR | RAX42v2 | unaffected |
|
||||||
| NETGEAR | RAX43 | unaffected |
|
||||||
| NETGEAR | RAX43v2 | unaffected |
|
||||||
| NETGEAR | RAX45 | unaffected |
|
||||||
| NETGEAR | RAX49S | unaffected |
|
||||||
| NETGEAR | RAX50 | unaffected |
|
||||||
| NETGEAR | RAX50v2 | unaffected |
|
||||||
| NETGEAR | RAX54S | unaffected |
|
||||||
| NETGEAR | RAX54Sv2 | unaffected |
|
||||||
| NETGEAR | RAX80 | unaffected |
|
||||||
| NETGEAR | RAXE500 | unaffected |
|
||||||
| NETGEAR | RS700 | unaffected |
|
||||||
| NETGEAR | XR1000 | unaffected |
|
||||||
| NETGEAR | XR1000v2 | unaffected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
Configuration 14 [-]
| AND |
|
Configuration 15 [-]
| AND |
|
Configuration 16 [-]
| AND |
|
Configuration 17 [-]
| AND |
|
Configuration 18 [-]
| AND |
|
Configuration 19 [-]
| AND |
|
Configuration 20 [-]
| AND |
|
Configuration 21 [-]
| AND |
|
Configuration 22 [-]
| AND |
|
Configuration 23 [-]
| AND |
|
Configuration 24 [-]
| AND |
|
Configuration 25 [-]
| AND |
|
Configuration 26 [-]
| AND |
|
Configuration 27 [-]
| AND |
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Netgear | Mr60 |
|
||||||||
| Netgear | Mr70 |
|
||||||||
| Netgear | Mr90 |
|
||||||||
| Netgear | Ms60 |
|
||||||||
| Netgear | Ms70 |
|
||||||||
| Netgear | Ms90 |
|
||||||||
| Netgear | Rax20 |
|
||||||||
| Netgear | Rax200 |
|
||||||||
| Netgear | Rax35 |
|
||||||||
| Netgear | Rax35v2 |
|
||||||||
| Netgear | Rax41 |
|
||||||||
| Netgear | Rax41v2 |
|
||||||||
| Netgear | Rax42 |
|
||||||||
| Netgear | Rax42v2 |
|
||||||||
| Netgear | Rax43 |
|
||||||||
| Netgear | Rax43v2 |
|
||||||||
| Netgear | Rax45 |
|
||||||||
| Netgear | Rax49s |
|
||||||||
| Netgear | Rax50 |
|
||||||||
| Netgear | Rax50v2 |
|
||||||||
| Netgear | Rax54s |
|
||||||||
| Netgear | Rax54sv2 |
|
||||||||
| Netgear | Rax80 |
|
||||||||
| Netgear | Raxe500 |
|
||||||||
| Netgear | Rs700 |
|
||||||||
| Netgear | Xr1000 |
|
||||||||
| Netgear | Xr1000v2 |
|
Vendor Solution
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionMR60 (EoS) Nighthawk Mesh WiFi 6 Router V1.1.8.142 https://www.netgear.com/support/product/mr60/ MR70 (EoS) Nighthawk Mesh WiFi 6 Router V1.0.4.48 https://www.netgear.com/support/product/mr70/ MR90 Nighthawk Tri-band Mesh WiFi 6E Router V1.0.2.46 https://www.netgear.com/support/product/mr90/ MS60 Nighthawk Mesh WiFi 6 Add-on Satellite V1.1.8.142 https://www.netgear.com/support/product/ms60/ MS70 Nighthawk Mesh WiFi 6 Add-on Satellite V1.0.4.48 https://www.netgear.com/support/product/ms70/ MS90 Nighthawk Tri-band Mesh WiFi 6E Add-on Satellite V1.0.2.46 https://www.netgear.com/support/product/ms90/ RAX20 (EoS) 4-Stream AX1800 WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax20/ RAX200 (EoS) Nighthawk Tri-Band AX12 12-Stream WiFi Router V1.0.11.148 https://www.netgear.com/support/product/rax200/ RAX35 (EoS) Nighthawk AX4 4-Stream WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax35/ RAX35v2 Nighthawk AX4 4-Stream AX3000 WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax35v2/ RAX41 (EoS) Nighthawk AX5 5-Stream AX3600 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax41/ RAX41v2 Nighthawk AX5 5-Stream AX3600 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax41v2/ RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax42/ RAX42v2 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax42v2/ RAX43 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax43/ RAX43v2 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax43v2/ RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi Router V1.0.17.142 https://www.netgear.com/support/product/rax45/ RAX49S Nighthawk AX6 6-Stream AX5300 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax49s/ RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.1.6.36 https://www.netgear.com/support/product/rax50/ RAX50v2 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.1.6.36 https://www.netgear.com/support/product/rax50v2/ RAX54S Nighthawk AX6 6-Stream AX5400 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax54s/ RAX54Sv2 Nighthawk AX6 6-Stream AX5400 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax54sv2/ RAX80 (EoS) Nighthawk AX8 8-Stream WiFi Router V1.0.11.148 https://www.netgear.com/support/product/rax80/ RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router V1.2.14.110 https://www.netgear.com/support/product/raxe500/ RS700 Nighthawk BE19000 WiFi 7 Tri-Band Router V1.0.9.6 https://www.netgear.com/support/product/rs700/ XR1000 Nighthawk WiFi 6 Pro Gaming Router V1.1.0.22 https://www.netgear.com/support/product/xr1000/ XR1000v2 Nighthawk WiFi 6 Pro Gaming Router V1.1.0.22 https://www.netgear.com/support/product/xr1000v2/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 2.5% (2.550% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Netgear mr60 Firmware
Netgear mr70 Firmware Netgear mr90 Firmware Netgear ms60 Firmware Netgear ms70 Firmware Netgear ms90 Firmware Netgear rax200 Firmware Netgear rax20 Firmware Netgear rax35 Firmware Netgear rax35v2 Firmware Netgear rax41 Firmware Netgear rax41v2 Firmware Netgear rax42 Firmware Netgear rax42v2 Firmware Netgear rax43 Firmware Netgear rax43v2 Firmware Netgear rax45 Firmware Netgear rax49s Firmware Netgear rax50 Firmware Netgear rax50v2 Firmware Netgear rax54s Firmware Netgear rax54sv2 Firmware Netgear rax80 Firmware Netgear raxe500 Firmware Netgear rs700 Firmware Netgear xr1000 Firmware Netgear xr1000v2 Firmware |
|
| CPEs | cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:mr90:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:ms90:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax35:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax41v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax42v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax43v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax49s:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax50v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax54s:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax54sv2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs700:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:xr1000v2:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:mr90_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:ms90_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax41v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax42v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax43v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax49s_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax50v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax54s_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax54sv2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs700_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Netgear mr60 Firmware
Netgear mr70 Firmware Netgear mr90 Firmware Netgear ms60 Firmware Netgear ms70 Firmware Netgear ms90 Firmware Netgear rax200 Firmware Netgear rax20 Firmware Netgear rax35 Firmware Netgear rax35v2 Firmware Netgear rax41 Firmware Netgear rax41v2 Firmware Netgear rax42 Firmware Netgear rax42v2 Firmware Netgear rax43 Firmware Netgear rax43v2 Firmware Netgear rax45 Firmware Netgear rax49s Firmware Netgear rax50 Firmware Netgear rax50v2 Firmware Netgear rax54s Firmware Netgear rax54sv2 Firmware Netgear rax80 Firmware Netgear raxe500 Firmware Netgear rs700 Firmware Netgear xr1000 Firmware Netgear xr1000v2 Firmware |
|
| Metrics |
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Netgear
Netgear mr60 Netgear mr70 Netgear mr90 Netgear ms60 Netgear ms70 Netgear ms90 Netgear rax20 Netgear rax200 Netgear rax35 Netgear rax35v2 Netgear rax41 Netgear rax41v2 Netgear rax42 Netgear rax42v2 Netgear rax43 Netgear rax43v2 Netgear rax45 Netgear rax49s Netgear rax50 Netgear rax50v2 Netgear rax54s Netgear rax54sv2 Netgear rax80 Netgear raxe500 Netgear rs700 Netgear xr1000 Netgear xr1000v2 |
|
| Vendors & Products |
Netgear
Netgear mr60 Netgear mr70 Netgear mr90 Netgear ms60 Netgear ms70 Netgear ms90 Netgear rax20 Netgear rax200 Netgear rax35 Netgear rax35v2 Netgear rax41 Netgear rax41v2 Netgear rax42 Netgear rax42v2 Netgear rax43 Netgear rax43v2 Netgear rax45 Netgear rax49s Netgear rax50 Netgear rax50v2 Netgear rax54s Netgear rax54sv2 Netgear rax80 Netgear raxe500 Netgear rs700 Netgear xr1000 Netgear xr1000v2 |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|