Medium severity6.8NVD Advisory· Published Apr 22, 2020· Updated Jun 17, 2026

CVE-2018-21112

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, and R9000 before 1.0.4.12.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/D7800 Firmware
cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.44
Netgear/R7500 Firmware
cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3.38
Netgear/R7800 Firmware
cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*
Range: <1.0.2.52
Netgear/R8900 Firmware
cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*
Range: <1.0.4.12
Netgear/R9000 Firmware
cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*
Range: <1.0.4.12
NETGEAR/NETGEAR devicesdescription
Netgear/D7800llm-fuzzy
Range: <1.0.1.44
Netgear/R7500v2llm-fuzzy
Range: <1.0.3.38
Netgear/R8900llm-fuzzy
Range: <1.0.4.12
Netgear/R9000llm-fuzzy
Range: <1.0.4.12
Netgear/R7800llm-fuzzy
Range: <1.0.2.52

Patches

Vulnerability mechanics

References

kb.netgear.com/000060439/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Modem-Routers-PSV-2018-0093nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000