{
    "id": "CVE-2018-21162",
    "published": "2020-04-23 21:15:11",
    "last_modified": "2026-06-17 01:54:16",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-78",
    "description": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250 before 1.0.4.8, R6300v2 before 1.0.4.6, R6400 before 1.0.1.12, R6700 before 1.0.1.16, R7000 before 1.0.7.10, R7100LG before 1.0.0.42, R7300DST before 1.0.0.44, R7900 before 1.0.1.12, R8000 before 1.0.3.36, R8300 before 1.0.2.74, R8500 before 1.0.2.74, WNDR3400v3 before 1.0.1.14, and WNR3500Lv2 before 1.2.0.48.",
    "epss_score": "0.03437",
    "epss_percentile": "0.88648",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-09 18:17:20",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.8), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "netgear",
            "product": "d6400"
        },
        {
            "vendor": "netgear",
            "product": "d6400_firmware"
        },
        {
            "vendor": "netgear",
            "product": "ex6200"
        },
        {
            "vendor": "netgear",
            "product": "ex6200_firmware"
        },
        {
            "vendor": "netgear",
            "product": "ex7000"
        },
        {
            "vendor": "netgear",
            "product": "ex7000_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r6250"
        },
        {
            "vendor": "netgear",
            "product": "r6250_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r6300"
        },
        {
            "vendor": "netgear",
            "product": "r6300_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r6400"
        },
        {
            "vendor": "netgear",
            "product": "r6400_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r6700"
        },
        {
            "vendor": "netgear",
            "product": "r6700_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r7000"
        },
        {
            "vendor": "netgear",
            "product": "r7000_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r7100lg"
        },
        {
            "vendor": "netgear",
            "product": "r7100lg_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r7300dst"
        },
        {
            "vendor": "netgear",
            "product": "r7300dst_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r7900"
        },
        {
            "vendor": "netgear",
            "product": "r7900_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r8000"
        },
        {
            "vendor": "netgear",
            "product": "r8000_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r8300"
        },
        {
            "vendor": "netgear",
            "product": "r8300_firmware"
        },
        {
            "vendor": "netgear",
            "product": "r8500"
        },
        {
            "vendor": "netgear",
            "product": "r8500_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wndr3400"
        },
        {
            "vendor": "netgear",
            "product": "wndr3400_firmware"
        },
        {
            "vendor": "netgear",
            "product": "wnr3500l"
        },
        {
            "vendor": "netgear",
            "product": "wnr3500l_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "https://kb.netgear.com/000059147/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Gateways-Routers-and-Extenders-PSV-2016-0074",
        "https://kb.netgear.com/000059147/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Gateways-Routers-and-Extenders-PSV-2016-0074"
    ]
}