VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 1, 2020· Updated Jun 17, 2026

CVE-2018-11106

CVE-2018-11106

Description

NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to 6.5.3.5; WC7600v2, running firmware versions prior to 6.5.3.5; and WC9500, running firmware versions prior to 6.5.3.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Netgear/Wc7500 Firmware
    cpe:2.3:o:netgear:wc7500_firmware:*:*:*:*:*:*:*:*
    Range: <6.5.3.5
  • Netgear/Wc7520 Firmware
    cpe:2.3:o:netgear:wc7520_firmware:*:*:*:*:*:*:*:*
    Range: <2.5.0.46
  • Netgear/Wc7600v1 Firmware
    cpe:2.3:o:netgear:wc7600v1_firmware:*:*:*:*:*:*:*:*
    Range: <6.5.3.5
  • Netgear/Wc7600v2 Firmware
    cpe:2.3:o:netgear:wc7600v2_firmware:*:*:*:*:*:*:*:*
    Range: <6.5.3.5
  • Netgear/Wc9500 Firmware
    cpe:2.3:o:netgear:wc9500_firmware:*:*:*:*:*:*:*:*
    Range: <6.5.3.5
  • Netgear/WC7500llm-fuzzy2 versions
    <6.5.3.5+ 1 more
    • (no CPE)range: <6.5.3.5
    • (no CPE)range: firmware versions prior to 6.5.3.5
  • Netgear/WC7520llm-fuzzy2 versions
    <2.5.0.46+ 1 more
    • (no CPE)range: <2.5.0.46
    • (no CPE)range: firmware versions prior to 2.5.0.46
  • Netgear/WC7600v1llm-fuzzy2 versions
    <6.5.3.5+ 1 more
    • (no CPE)range: <6.5.3.5
    • (no CPE)range: firmware versions prior to 6.5.3.5
  • Netgear/WC7600v2llm-fuzzy2 versions
    <6.5.3.5+ 1 more
    • (no CPE)range: <6.5.3.5
    • (no CPE)range: firmware versions prior to 6.5.3.5
  • Netgear/WC9500llm-fuzzy2 versions
    <6.5.3.5+ 1 more
    • (no CPE)range: <6.5.3.5
    • (no CPE)range: firmware versions prior to 6.5.3.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.