High severity8.8NVD Advisory· Published Apr 22, 2020· Updated Jun 17, 2026

CVE-2018-21123

Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WC7500 before 6.5.3.9, WC7520 before 6.5.3.9, WC7600v1 before 6.5.3.9, and WC7600v2 before 6.5.3.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Wc7500 Firmware
cpe:2.3:o:netgear:wc7500_firmware:*:*:*:*:*:*:*:*
Range: <6.5.3.9
Netgear/Wc7520 Firmware
cpe:2.3:o:netgear:wc7520_firmware:*:*:*:*:*:*:*:*
Range: <6.5.3.9
Netgear/Wc7600 Firmware
cpe:2.3:o:netgear:wc7600_firmware:*:*:*:*:*:*:*:*
Range: <6.5.3.9
Netgear/WC7500llm-fuzzy
Range: <6.5.3.9
Netgear/WC7520llm-fuzzy
Range: <6.5.3.9
Netgear/WC7600v1llm-fuzzy
Range: <6.5.3.9
Netgear/WC7600v2llm-fuzzy
Range: <6.5.3.9

Patches

Vulnerability mechanics

References

kb.netgear.com/000060235/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Wireless-Controllers-PSV-2018-0230nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000