Description (CNA)
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NETGEAR / BE9300 | affected 0 before V1.0.1.84 |
| NETGEAR / MR60 | affected 0 before V1.1.8.142 |
| NETGEAR / MS60 | affected 0 before V1.1.8.142 |
| NETGEAR / R6700AX | affected 0 before V1.0.18.164 |
| NETGEAR / RAX10 | affected 0 before V1.0.5.50 |
| NETGEAR / RAX120 | affected 0 before V1.2.10.56 |
| NETGEAR / RAX120v2 | affected 0 before V1.2.10.56 |
| NETGEAR / RAX20 | affected 0 before V1.0.17.142 |
| NETGEAR / RAX28 | affected 0 before V1.0.14.108 |
| NETGEAR / RAX29 | affected 0 before V1.0.14.108 |
| NETGEAR / RAX30 | affected 0 before V1.0.14.108 |
| NETGEAR / RAX36S | affected 0 before V1.0.5.50 |
| NETGEAR / RAX43 | affected 0 before V1.0.17.142 |
| NETGEAR / RAX45 | affected 0 before V1.0.17.142 |
| NETGEAR / RAX50 | affected 0 before V1.0.17.142 |
| NETGEAR / RAX70 | affected 0 before V1.0.19.172 |
| NETGEAR / RBR760 | affected 0 before V6.3.8.11 |
| NETGEAR / RBS760 | affected 0 before V6.3.8.11 |
| NETGEAR / RS100 | affected 0 before V1.0.1.80 |
| NETGEAR / RS200 | affected 0 before V1.0.1.90 |
| NETGEAR / RS280 | affected 0 before V1.0.1.90 |
| NETGEAR / RS300 | affected 0 before V1.0.1.90 |
| NETGEAR / RS500 | affected 0 before V1.0.1.90 |
| NETGEAR / RS600 | affected 0 before V1.0.1.90 |
| NETGEAR / RS70 | affected 0 before V1.0.1.80 |
| NETGEAR / RS90 | affected 0 before V1.0.1.80 |
CWE
CWE-295
References
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/be9300/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/r6700ax/
- https://www.netgear.com/support/product/rax10/
- https://www.netgear.com/support/product/rax120/
- https://www.netgear.com/support/product/rax120v2/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax29/
- https://www.netgear.com/support/product/rax28/
- https://www.netgear.com/support/product/rax30/
- https://www.netgear.com/support/product/rax36s/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/rax70/
- https://www.netgear.com/support/product/rbr760/
- https://www.netgear.com/support/product/rs280/
- https://www.netgear.com/support/product/rbs760/
- https://www.netgear.com/support/product/rs200/
- https://www.netgear.com/support/product/rs300/
- https://www.netgear.com/support/product/rs100/
- https://www.netgear.com/support/product/rs70/
- https://www.netgear.com/support/product/rs600/
- https://www.netgear.com/support/product/rs500/
- https://www.netgear.com/support/product/rs90/
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
ADP enrichment
No English description supplied.
No references supplied.