Medium severity6.8NVD Advisory· Published Apr 21, 2020· Updated Jun 17, 2026

CVE-2018-21146

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NETGEAR/devicesdescription
Netgear/D7800llm-fuzzy
Range: <1.0.1.34
Netgear/WNDR4300v2llm-fuzzy
Range: <1.0.0.54
Netgear/WNDR4500v3llm-fuzzy
Range: <1.0.0.54
Netgear/R8900llm-fuzzy
Range: <1.0.3.10
Netgear/R9000llm-fuzzy
Range: <1.0.3.10
Netgear/R7800llm-fuzzy
Range: <1.0.2.42

Patches

Vulnerability mechanics

References

kb.netgear.com/000059487/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Gateways-and-Routers-PSV-2017-3159nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000