VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 1, 2020· Updated Aug 5, 2024

CVE-2018-11106

CVE-2018-11106

Description

NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to 6.5.3.5; WC7600v2, running firmware versions prior to 6.5.3.5; and WC9500, running firmware versions prior to 6.5.3.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Netgear/WC7600v2llm-create2 versions
    <6.5.3.5+ 1 more
    • (no CPE)range: <6.5.3.5
    • (no CPE)range: firmware versions prior to 6.5.3.5
  • Netgear/WC7500llm-fuzzy2 versions
    <6.5.3.5+ 1 more
    • (no CPE)range: <6.5.3.5
    • (no CPE)range: firmware versions prior to 6.5.3.5
  • Netgear/WC7520llm-fuzzy2 versions
    <2.5.0.46+ 1 more
    • (no CPE)range: <2.5.0.46
    • (no CPE)range: firmware versions prior to 2.5.0.46
  • Netgear/WC7600v1cpe-rescue
    Range: firmware versions prior to 6.5.3.5
  • Netgear/WC9500cpe-rescue
    Range: firmware versions prior to 6.5.3.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.