Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| NETGEAR | BE9300 | unaffected |
|
||||||
| NETGEAR | MR60 | unaffected |
|
||||||
| NETGEAR | MS60 | unaffected |
|
||||||
| NETGEAR | R6700AX | unaffected |
|
||||||
| NETGEAR | RAX10 | unaffected |
|
||||||
| NETGEAR | RAX120 | unaffected |
|
||||||
| NETGEAR | RAX120v2 | unaffected |
|
||||||
| NETGEAR | RAX20 | unaffected |
|
||||||
| NETGEAR | RAX28 | unaffected |
|
||||||
| NETGEAR | RAX29 | unaffected |
|
||||||
| NETGEAR | RAX30 | unaffected |
|
||||||
| NETGEAR | RAX36S | unaffected |
|
||||||
| NETGEAR | RAX43 | unaffected |
|
||||||
| NETGEAR | RAX45 | unaffected |
|
||||||
| NETGEAR | RAX50 | unaffected |
|
||||||
| NETGEAR | RAX70 | unaffected |
|
||||||
| NETGEAR | RBR760 | unaffected |
|
||||||
| NETGEAR | RBS760 | unaffected |
|
||||||
| NETGEAR | RS100 | unaffected |
|
||||||
| NETGEAR | RS200 | unaffected |
|
||||||
| NETGEAR | RS280 | unaffected |
|
||||||
| NETGEAR | RS300 | unaffected |
|
||||||
| NETGEAR | RS500 | unaffected |
|
||||||
| NETGEAR | RS600 | unaffected |
|
||||||
| NETGEAR | RS70 | unaffected |
|
||||||
| NETGEAR | RS90 | unaffected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
Configuration 14 [-]
| AND |
|
Configuration 15 [-]
| AND |
|
Configuration 16 [-]
| AND |
|
Configuration 17 [-]
| AND |
|
Configuration 18 [-]
| AND |
|
Configuration 19 [-]
| AND |
|
Configuration 20 [-]
| AND |
|
Configuration 21 [-]
| AND |
|
Configuration 22 [-]
| AND |
|
Configuration 23 [-]
| AND |
|
Configuration 24 [-]
| AND |
|
Configuration 25 [-]
| AND |
|
Configuration 26 [-]
| AND |
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Netgear | Be9300 |
|
||||||||
| Netgear | Mr60 |
|
||||||||
| Netgear | Ms60 |
|
||||||||
| Netgear | R6700ax |
|
||||||||
| Netgear | Rax10 |
|
||||||||
| Netgear | Rax120 |
|
||||||||
| Netgear | Rax120v2 |
|
||||||||
| Netgear | Rax20 |
|
||||||||
| Netgear | Rax28 |
|
||||||||
| Netgear | Rax29 |
|
||||||||
| Netgear | Rax30 |
|
||||||||
| Netgear | Rax36s |
|
||||||||
| Netgear | Rax43 |
|
||||||||
| Netgear | Rax45 |
|
||||||||
| Netgear | Rax50 |
|
||||||||
| Netgear | Rax70 |
|
||||||||
| Netgear | Rbr760 |
|
||||||||
| Netgear | Rbs760 |
|
||||||||
| Netgear | Rs100 |
|
||||||||
| Netgear | Rs200 |
|
||||||||
| Netgear | Rs280 |
|
||||||||
| Netgear | Rs300 |
|
||||||||
| Netgear | Rs500 |
|
||||||||
| Netgear | Rs600 |
|
||||||||
| Netgear | Rs70 |
|
||||||||
| Netgear | Rs90 |
|
Vendor Solution
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionBE9300 Nighthawk WiFi 7 Tri-Band Router V1.0.1.84 https://www.netgear.com/support/product/be9300/ MR60 (EoS) Nighthawk Mesh WiFi 6 Router V1.1.8.142 https://www.netgear.com/support/product/mr60/ MS60 Nighthawk Mesh WiFi 6 Add-on Satellite V1.1.8.142 https://www.netgear.com/support/product/ms60/ R6700AX (EoS) 4-Stream AX1800 WiFi 6 Router V1.0.18.164 https://www.netgear.com/support/product/r6700ax/ RAX10 4-Stream AX1800 WiFi 6 Router V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX120 (EoS) Nighthawk AX12 12-Stream WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX20 (EoS) 4-Stream AX1800 WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax20/ RAX28 (EoS) Nighthawk AX5 5-Stream AX2200 WiFi 6 Router V1.0.14.108 https://www.netgear.com/support/product/rax28/ RAX29 Nighthawk AX2400 WiFi 6 Router V1.0.14.108 https://www.netgear.com/support/product/rax29/ RAX30 (EoS) Nighthawk AX5 5-Stream AX2400 WiFi 6 Router V1.0.14.108 https://www.netgear.com/support/product/rax30/ RAX36S Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX43 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.0.17.142 https://www.netgear.com/support/product/rax43/ RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi Router V1.0.17.142 https://www.netgear.com/support/product/rax45/ RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax50/ RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router V1.0.19.172 https://www.netgear.com/support/product/rax70/ RBR760 Orbi Tri-Band Mesh WiFi 6 Router V6.3.8.11 https://www.netgear.com/support/product/rbr760/ RBS760 Orbi Tri-Band Mesh WiFi 6 Add-on Satellite V6.3.8.11 https://www.netgear.com/support/product/rbs760/ RS100 Nighthawk WiFi 7 Dual-Band Router V1.0.1.80 https://www.netgear.com/support/product/rs100/ RS200 Nighthawk BE6500 WiFi 7 Dual-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs200/ RS280 Nighthawk BE9200 WiFi 7 Tri-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs280/ RS300 Nighthawk BE9300 WiFi 7 Tri-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs300/ RS500 Nighthawk BE12000 WiFi 7 Tri-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs500/ RS600 Nighthawk BE18000 WiFi 7 Tri-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs600/ RS70 Nighthawk WiFi 7 Dual-Band Router V1.0.1.80 https://www.netgear.com/support/product/rs70/ RS90 Nighthawk WiFi 7 Dual-Band Router V1.0.1.80 https://www.netgear.com/support/product/rs90/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 2.2% (2.183% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Netgear
Netgear be9300 Netgear be9300 Firmware Netgear mr60 Netgear mr60 Firmware Netgear ms60 Netgear ms60 Firmware Netgear r6700ax Netgear r6700ax Firmware Netgear rax10 Netgear rax10 Firmware Netgear rax120 Netgear rax120 Firmware Netgear rax120v2 Netgear rax120v2 Firmware Netgear rax20 Netgear rax20 Firmware Netgear rax28 Netgear rax28 Firmware Netgear rax29 Netgear rax29 Firmware Netgear rax30 Netgear rax30 Firmware Netgear rax36s Netgear rax36s Firmware Netgear rax43 Netgear rax43 Firmware Netgear rax45 Netgear rax45 Firmware Netgear rax50 Netgear rax50 Firmware Netgear rax70 Netgear rax70 Firmware Netgear rbr760 Netgear rbr760 Firmware Netgear rbs760 Netgear rbs760 Firmware Netgear rs100 Netgear rs100 Firmware Netgear rs200 Netgear rs200 Firmware Netgear rs280 Netgear rs280 Firmware Netgear rs300 Netgear rs300 Firmware Netgear rs500 Netgear rs500 Firmware Netgear rs600 Netgear rs600 Firmware Netgear rs70 Netgear rs70 Firmware Netgear rs90 Netgear rs90 Firmware |
|
| Weaknesses | CWE-77 | |
| CPEs | cpe:2.3:h:netgear:be9300:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:r6700ax:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax10:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax120v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax28:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax29:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax36s:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax70:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbr760:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbs760:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs100:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs200:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs280:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs300:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs500:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs600:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs70:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rs90:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:be9300_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:r6700ax_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax10_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax120v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax28_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax29_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax36s_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax70_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbr760_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbs760_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs100_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs200_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs280_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs300_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs500_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs600_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs70_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rs90_firmware:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Netgear
Netgear be9300 Netgear be9300 Firmware Netgear mr60 Netgear mr60 Firmware Netgear ms60 Netgear ms60 Firmware Netgear r6700ax Netgear r6700ax Firmware Netgear rax10 Netgear rax10 Firmware Netgear rax120 Netgear rax120 Firmware Netgear rax120v2 Netgear rax120v2 Firmware Netgear rax20 Netgear rax20 Firmware Netgear rax28 Netgear rax28 Firmware Netgear rax29 Netgear rax29 Firmware Netgear rax30 Netgear rax30 Firmware Netgear rax36s Netgear rax36s Firmware Netgear rax43 Netgear rax43 Firmware Netgear rax45 Netgear rax45 Firmware Netgear rax50 Netgear rax50 Firmware Netgear rax70 Netgear rax70 Firmware Netgear rbr760 Netgear rbr760 Firmware Netgear rbs760 Netgear rbs760 Firmware Netgear rs100 Netgear rs100 Firmware Netgear rs200 Netgear rs200 Firmware Netgear rs280 Netgear rs280 Firmware Netgear rs300 Netgear rs300 Firmware Netgear rs500 Netgear rs500 Firmware Netgear rs600 Netgear rs600 Firmware Netgear rs70 Netgear rs70 Firmware Netgear rs90 Netgear rs90 Firmware |
|
| Metrics |
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|