ID

VAR-202004-1683


CVE

CVE-2018-21225


TITLE

plural NETGEAR On the device OS Command injection vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2018-016333

DESCRIPTION

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6700 before 1.0.1.30, R6700v2 before 1.2.0.16, R6800 before 1.2.0.16, R6900 before 1.0.1.30, R6900P before 1.2.0.22, R6900v2 before 1.2.0.16, R7000 before 1.0.9.12, R7000P before 1.2.0.22, R7500v2 before 1.0.3.20, R7800 before 1.0.2.44, R8300 before 1.0.2.106, R8500 before 1.0.2.106, and R9000 before 1.0.2.52. plural NETGEAR On the device OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. NETGEAR D7800, etc. are all products of NETGEAR. NETGEAR D7800 is a wireless modem. NETGEAR D7000 is a wireless modem. NETGEAR R6900 is a wireless router. The vulnerability stems from the fact that the network system or product does not correctly filter the special characters, commands, etc. in the process of constructing the executable command of the operating system by external input data. Attackers can use this vulnerability to execute illegal operating system commands. This affects D7000 prior to 1.0.1.60, D7800 prior to 1.0.1.34, D8500 prior to 1.0.3.39, R6700 prior to 1.0.1.30, R6700v2 prior to 1.2.0.16, R6800 prior to 1.2.0.16, R6900 prior to 1.0.1.30, R6900P prior to 1.2.0.22, R6900v2 prior to 1.2.0.16, R7000 prior to 1.0.9.12, R7000P prior to 1.2.0.22, R7500v2 prior to 1.0.3.20, R7800 prior to 1.0.2.44, R8300 prior to 1.0.2.106, R8500 prior to 1.0.2.106, and R9000 prior to 1.0.2.52

Trust: 2.25

sources: NVD: CVE-2018-21225 // JVNDB: JVNDB-2018-016333 // CNVD: CNVD-2021-48931 // VULMON: CVE-2018-21225

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-48931

AFFECTED PRODUCTS

vendor:netgearmodel:r9000scope:ltversion:1.0.2.52

Trust: 1.6

vendor:netgearmodel:r8500scope:ltversion:1.0.2.106

Trust: 1.6

vendor:netgearmodel:r8300scope:ltversion:1.0.2.106

Trust: 1.6

vendor:netgearmodel:r7000pscope:ltversion:1.2.0.22

Trust: 1.6

vendor:netgearmodel:r6900pscope:ltversion:1.2.0.22

Trust: 1.6

vendor:netgearmodel:d7800scope:ltversion:1.0.1.34

Trust: 1.6

vendor:netgearmodel:d7000scope:ltversion:1.0.1.60

Trust: 1.6

vendor:netgearmodel:d8500scope:ltversion:1.0.3.39

Trust: 1.6

vendor:netgearmodel:r6700scope:ltversion:1.0.1.30

Trust: 1.6

vendor:netgearmodel:r6800scope:ltversion:1.2.0.16

Trust: 1.6

vendor:netgearmodel:r6900scope:ltversion:1.0.1.30

Trust: 1.6

vendor:netgearmodel:r7000scope:ltversion:1.0.9.12

Trust: 1.6

vendor:netgearmodel:r7800scope:ltversion:1.0.2.44

Trust: 1.6

vendor:netgearmodel:r7500scope:ltversion:1.0.3.20

Trust: 1.0

vendor:netgearmodel:r6700scope:ltversion:1.2.0.16

Trust: 1.0

vendor:netgearmodel:r6900scope:ltversion:1.2.0.16

Trust: 1.0

vendor:netgearmodel:r6700scope:eqversion:1.0.1.30

Trust: 0.9

vendor:netgearmodel:r6900scope:eqversion:1.0.1.30

Trust: 0.9

vendor:netgearmodel:d7000scope:eqversion:1.0.1.60

Trust: 0.8

vendor:netgearmodel:d7800scope:eqversion:1.0.1.34

Trust: 0.8

vendor:netgearmodel:d8500scope:eqversion:1.0.3.39

Trust: 0.8

vendor:netgearmodel:r6700scope:eqversion:1.2.0.16

Trust: 0.8

vendor:netgearmodel:r6800scope:eqversion:1.2.0.16

Trust: 0.8

vendor:netgearmodel:r6900scope:eqversion:1.2.0.16

Trust: 0.8

vendor:netgearmodel:r6900pscope:eqversion:1.2.0.22

Trust: 0.8

vendor:netgearmodel:r7000scope:eqversion:1.0.9.12

Trust: 0.8

vendor:netgearmodel:r7500v2scope:ltversion:1.0.3.20

Trust: 0.6

vendor:netgearmodel:r6700v2scope:ltversion:1.2.0.16

Trust: 0.6

vendor:netgearmodel:r6900v2scope:ltversion:1.2.0.16

Trust: 0.6

vendor:netgearmodel:d7000scope:eqversion: -

Trust: 0.1

vendor:netgearmodel:d7000scope:eqversion:1.0.0.38

Trust: 0.1

vendor:netgearmodel:d7000scope:eqversion:1.0.0.44

Trust: 0.1

vendor:netgearmodel:d7000scope:eqversion:1.0.0.51

Trust: 0.1

vendor:netgearmodel:d7000scope:eqversion:1.0.0.52

Trust: 0.1

vendor:netgearmodel:d7000scope:eqversion:1.0.0.53

Trust: 0.1

vendor:netgearmodel:d7000scope:eqversion:1.0.0.74

Trust: 0.1

vendor:netgearmodel:d7000scope:eqversion:1.0.1.50

Trust: 0.1

vendor:netgearmodel:d7000scope:eqversion:1.0.1.52

Trust: 0.1

vendor:netgearmodel:d7800scope:eqversion:1.0.1.22

Trust: 0.1

vendor:netgearmodel:d7800scope:eqversion:1.0.1.24

Trust: 0.1

vendor:netgearmodel:d7800scope:eqversion:1.0.1.28

Trust: 0.1

vendor:netgearmodel:d7800scope:eqversion:1.0.1.30

Trust: 0.1

vendor:netgearmodel:d7800scope:eqversion:1.0.1.31

Trust: 0.1

vendor:netgearmodel:d8500scope:eqversion: -

Trust: 0.1

vendor:netgearmodel:d8500scope:eqversion:1.0.3.27

Trust: 0.1

vendor:netgearmodel:d8500scope:eqversion:1.0.3.28

Trust: 0.1

vendor:netgearmodel:d8500scope:eqversion:1.0.3.29

Trust: 0.1

vendor:netgearmodel:d8500scope:eqversion:1.0.3.35

Trust: 0.1

vendor:netgearmodel:d8500scope:eqversion:1.0.3.36

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion: -

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.14

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.16

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.20

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.22

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.26

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.36

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.44

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.46

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.1.48

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.2.6

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.2.8

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.2.32

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.2.52

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.2.66

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.0.4.84

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.1.0.38

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.1.0.42

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.1.1.20

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.2.0.2

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.2.0.4

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.2.0.12

Trust: 0.1

vendor:netgearmodel:r6700scope:eqversion:1.2.0.14

Trust: 0.1

vendor:netgearmodel:r6800scope:eqversion:1.0.1.10

Trust: 0.1

vendor:netgearmodel:r6800scope:eqversion:1.1.0.38

Trust: 0.1

vendor:netgearmodel:r6800scope:eqversion:1.1.0.42

Trust: 0.1

vendor:netgearmodel:r6800scope:eqversion:1.2.0.2

Trust: 0.1

vendor:netgearmodel:r6800scope:eqversion:1.2.0.4

Trust: 0.1

vendor:netgearmodel:r6800scope:eqversion:1.2.0.12

Trust: 0.1

vendor:netgearmodel:r6800scope:eqversion:1.2.0.14

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion: -

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.14

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.16

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.20

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.22

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.26

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.28

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.34

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.44

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.46

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.1.48

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.2.4

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.0.2.8

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.1.0.42

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.2.0.2

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.2.0.4

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.2.0.12

Trust: 0.1

vendor:netgearmodel:r6900scope:eqversion:1.2.0.14

Trust: 0.1

vendor:netgearmodel:r6900pscope:eqversion: -

Trust: 0.1

vendor:netgearmodel:r6900pscope:eqversion:1.0.0.56

Trust: 0.1

vendor:netgearmodel:r6900pscope:eqversion:1.0.0.58

Trust: 0.1

vendor:netgearmodel:r6900pscope:eqversion:1.0.0.62

Trust: 0.1

vendor:netgearmodel:r6900pscope:eqversion:1.0.1.16

Trust: 0.1

vendor:netgearmodel:r7000scope:eqversion: -

Trust: 0.1

vendor:netgearmodel:r7000scope:eqversion:1.0.7.2 1.1.93

Trust: 0.1

vendor:netgearmodel:r7000scope:eqversion:1.0.7.10

Trust: 0.1

vendor:netgearmodel:r7000scope:eqversion:1.0.9.4

Trust: 0.1

vendor:netgearmodel:r7000scope:eqversion:1.0.9.6

Trust: 0.1

vendor:netgearmodel:r7000scope:eqversion:1.0.9.10

Trust: 0.1

vendor:netgearmodel:r7000pscope:eqversion: -

Trust: 0.1

vendor:netgearmodel:r7000pscope:eqversion:1.0.0.56

Trust: 0.1

vendor:netgearmodel:r7000pscope:eqversion:1.0.0.58

Trust: 0.1

vendor:netgearmodel:r7000pscope:eqversion:1.0.0.62

Trust: 0.1

vendor:netgearmodel:r7000pscope:eqversion:1.0.0.86

Trust: 0.1

vendor:netgearmodel:r7000pscope:eqversion:1.0.1.16

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.0.108

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.0.110

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.0.112

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.0.116

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.0.118

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.0.122

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.0.124

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.0.130

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.3.10

Trust: 0.1

vendor:netgearmodel:r7500scope:eqversion:1.0.3.16

Trust: 0.1

vendor:netgearmodel:r7800scope:eqversion:1.0.2.16

Trust: 0.1

vendor:netgearmodel:r7800scope:eqversion:1.0.2.28

Trust: 0.1

vendor:netgearmodel:r7800scope:eqversion:1.0.2.30

Trust: 0.1

vendor:netgearmodel:r7800scope:eqversion:1.0.2.32

Trust: 0.1

vendor:netgearmodel:r7800scope:eqversion:1.0.2.36

Trust: 0.1

vendor:netgearmodel:r7800scope:eqversion:1.0.2.38

Trust: 0.1

vendor:netgearmodel:r7800scope:eqversion:1.0.2.40

Trust: 0.1

vendor:netgearmodel:r7800scope:eqversion:1.0.2.42

Trust: 0.1

vendor:netgearmodel:r8300scope:eqversion: -

Trust: 0.1

vendor:netgearmodel:r8300scope:eqversion:1.0.2.74

Trust: 0.1

vendor:netgearmodel:r8300scope:eqversion:1.0.2.86

Trust: 0.1

vendor:netgearmodel:r8300scope:eqversion:1.0.2.94

Trust: 0.1

vendor:netgearmodel:r8300scope:eqversion:1.0.2.100 1.0.82

Trust: 0.1

vendor:netgearmodel:r8300scope:eqversion:1.0.2.104

Trust: 0.1

vendor:netgearmodel:r8500scope:eqversion: -

Trust: 0.1

vendor:netgearmodel:r8500scope:eqversion:1.0.2.74

Trust: 0.1

vendor:netgearmodel:r8500scope:eqversion:1.0.2.86

Trust: 0.1

vendor:netgearmodel:r8500scope:eqversion:1.0.2.94

Trust: 0.1

vendor:netgearmodel:r8500scope:eqversion:1.0.2.100

Trust: 0.1

vendor:netgearmodel:r8500scope:eqversion:1.0.2.100 1.0.82

Trust: 0.1

vendor:netgearmodel:r8500scope:eqversion:1.0.2.104

Trust: 0.1

vendor:netgearmodel:r9000scope:eqversion: -

Trust: 0.1

vendor:netgearmodel:r9000scope:eqversion:1.0.2.4

Trust: 0.1

vendor:netgearmodel:r9000scope:eqversion:1.0.2.30

Trust: 0.1

vendor:netgearmodel:r9000scope:eqversion:1.0.2.40

Trust: 0.1

sources: CNVD: CNVD-2021-48931 // VULMON: CVE-2018-21225 // JVNDB: JVNDB-2018-016333 // NVD: CVE-2018-21225

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-21225
value: MEDIUM

Trust: 1.0

cve@mitre.org: CVE-2018-21225
value: MEDIUM

Trust: 1.0

NVD: JVNDB-2018-016333
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2021-48931
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-202004-2320
value: MEDIUM

Trust: 0.6

VULMON: CVE-2018-21225
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2018-21225
severity: MEDIUM
baseScore: 5.2
vectorString: AV:A/AC:L/AU:S/C:P/I:P/A:P
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 5.1
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

NVD: JVNDB-2018-016333
severity: MEDIUM
baseScore: 5.2
vectorString: AV:A/AC:L/AU:S/C:P/I:P/A:P
accessVector: ADJACENT NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2021-48931
severity: MEDIUM
baseScore: 5.2
vectorString: AV:A/AC:L/AU:S/C:P/I:P/A:P
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 5.1
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2018-21225
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 0.9
impactScore: 5.9
version: 3.1

Trust: 1.0

cve@mitre.org: CVE-2018-21225
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 0.9
impactScore: 5.9
version: 3.0

Trust: 1.0

NVD: JVNDB-2018-016333
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2021-48931 // VULMON: CVE-2018-21225 // JVNDB: JVNDB-2018-016333 // CNNVD: CNNVD-202004-2320 // NVD: CVE-2018-21225 // NVD: CVE-2018-21225

PROBLEMTYPE DATA

problemtype:CWE-78

Trust: 1.8

sources: JVNDB: JVNDB-2018-016333 // NVD: CVE-2018-21225

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202004-2320

TYPE

operating system commend injection

Trust: 0.6

sources: CNNVD: CNNVD-202004-2320

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-016333

PATCH

title:Security Advisory for Post-Authentication Command Injection on Some Routers and Gateways, PSV-2017-2160url:https://kb.netgear.com/000055112/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2017-2160

Trust: 0.8

title:Patch for Operating system command injection vulnerabilities in multiple NETGEAR products (CNVD-2021-48931)url:https://www.cnvd.org.cn/patchInfo/show/277341

Trust: 0.6

sources: CNVD: CNVD-2021-48931 // JVNDB: JVNDB-2018-016333

EXTERNAL IDS

db:NVDid:CVE-2018-21225

Trust: 3.1

db:JVNDBid:JVNDB-2018-016333

Trust: 0.8

db:CNVDid:CNVD-2021-48931

Trust: 0.6

db:CNNVDid:CNNVD-202004-2320

Trust: 0.6

db:VULMONid:CVE-2018-21225

Trust: 0.1

sources: CNVD: CNVD-2021-48931 // VULMON: CVE-2018-21225 // JVNDB: JVNDB-2018-016333 // CNNVD: CNNVD-202004-2320 // NVD: CVE-2018-21225

REFERENCES

url:https://nvd.nist.gov/vuln/detail/cve-2018-21225

Trust: 2.0

url:https://kb.netgear.com/000055112/security-advisory-for-post-authentication-command-injection-on-some-routers-and-gateways-psv-2017-2160

Trust: 1.7

url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-21225

Trust: 0.8

url:https://cwe.mitre.org/data/definitions/78.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: CNVD: CNVD-2021-48931 // VULMON: CVE-2018-21225 // JVNDB: JVNDB-2018-016333 // CNNVD: CNNVD-202004-2320 // NVD: CVE-2018-21225

SOURCES

db:CNVDid:CNVD-2021-48931
db:VULMONid:CVE-2018-21225
db:JVNDBid:JVNDB-2018-016333
db:CNNVDid:CNNVD-202004-2320
db:NVDid:CVE-2018-21225

LAST UPDATE DATE

2024-11-23T22:29:38.672000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-48931date:2021-07-09T00:00:00
db:VULMONid:CVE-2018-21225date:2020-05-04T00:00:00
db:JVNDBid:JVNDB-2018-016333date:2020-06-01T00:00:00
db:CNNVDid:CNNVD-202004-2320date:2020-05-07T00:00:00
db:NVDid:CVE-2018-21225date:2024-11-21T04:03:13.433

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-48931date:2020-07-08T00:00:00
db:VULMONid:CVE-2018-21225date:2020-04-28T00:00:00
db:JVNDBid:JVNDB-2018-016333date:2020-06-01T00:00:00
db:CNNVDid:CNNVD-202004-2320date:2020-04-28T00:00:00
db:NVDid:CVE-2018-21225date:2020-04-28T17:15:13.163