7.5

CVE-2018-21139

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58, D6200 before 1.1.00.30, D6220 before 1.0.0.46, D6400 before 1.0.0.82, D7000 before 1.0.1.68, D7000v2 before 1.0.0.51, D7800 before 1.0.1.42, D8500 before 1.0.3.42, DC112A before 1.0.0.40, DGN2200Bv4 before 1.0.0.102, DGN2200v4 before 1.0.0.102, JNR1010v2 before 1.1.0.54, JR6150 before 1.0.1.18, JWNR2010v5 before 1.1.0.54, PR2000 before 1.0.0.24, R6020 before 1.0.0.34, R6050 before 1.0.1.18, R6080 before 1.0.0.34, R6100 before 1.0.1.22, R6120 before 1.0.0.42, R6220 before 1.1.0.68, R6250 before 1.0.4.30, R6300v2 before 1.0.4.32, R6400 before 1.0.1.44, R6400v2 before 1.0.2.60, R6700 before 1.0.1.48, R6700v2 before 1.2.0.24, R6800 before 1.2.0.24, R6900 before 1.0.1.48, R6900P before 1.3.1.44, R6900v2 before 1.2.0.24, R7000 before 1.0.9.34, R7000P before 1.3.1.44, R7100LG before 1.0.0.48, R7300 before 1.0.0.68, R7500 before 1.0.0.124, R7500v2 before 1.0.3.38, R7900 before 1.0.2.16, R7900P before 1.4.1.24, R8000 before 1.0.4.18, R8000P before 1.4.1.24, R8300 before 1.0.2.122, R8500 before 1.0.2.122, WN3000RP before 1.0.0.68, WN3000RPv2 before 1.0.0.68, WNDR3400v3 before 1.0.1.18, WNDR3700v4 before 1.0.2.102, WNDR3700v5 before 1.1.0.54, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.56, WNDR4500v3 before 1.0.0.56, WNR1000v4 before 1.1.0.54, WNR2020 before 1.1.0.54, WNR2050 before 1.1.0.54, and WNR3500Lv2 before 1.2.0.54.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
NetgearD1500 Firmware Version < 1.0.0.27
   NetgearD1500 Version-
NetgearD500 Firmware Version < 1.0.0.27
   NetgearD500 Version-
NetgearD6100 Firmware Version < 1.0.0.58
   NetgearD6100 Version-
NetgearD6200 Firmware Version < 1.1.00.30
   NetgearD6200 Version-
NetgearD6220 Firmware Version < 1.0.0.46
   NetgearD6220 Version-
NetgearD6400 Firmware Version < 1.0.0.82
   NetgearD6400 Version-
NetgearD7000 Firmware Version < 1.0.1.68
   NetgearD7000 Version-
NetgearD7000 Firmware Version < 1.0.0.51
   NetgearD7000 Versionv2
NetgearD7800 Firmware Version < 1.0.1.42
   NetgearD7800 Version-
NetgearD8500 Firmware Version < 1.0.3.42
   NetgearD8500 Version-
NetgearDc112a Firmware Version < 1.0.0.40
   NetgearDc112a Version-
NetgearDgn2200b Firmware Version < 1.0.0.102
   NetgearDgn2200b Versionv4
NetgearDgn2200 Firmware Version < 1.0.0.102
   NetgearDgn2200 Versionv4
NetgearJnr1010 Firmware Version < 1.1.0.54
   NetgearJnr1010 Versionv2
NetgearJr6150 Firmware Version < 1.0.1.18
   NetgearJr6150 Version-
NetgearJwnr2010 Firmware Version < 1.1.0.54
   NetgearJwnr2010 Versionv5
NetgearPr2000 Firmware Version < 1.0.0.24
   NetgearPr2000 Version-
NetgearR6020 Firmware Version < 1.0.0.34
   NetgearR6020 Version-
NetgearR6050 Firmware Version < 1.0.1.18
   NetgearR6050 Version-
NetgearR6080 Firmware Version < 1.0.0.34
   NetgearR6080 Version-
NetgearR6100 Firmware Version < 1.0.1.22
   NetgearR6100 Version-
NetgearR6120 Firmware Version < 1.0.0.42
   NetgearR6120 Version-
NetgearR6220 Firmware Version < 1.1.0.68
   NetgearR6220 Version-
NetgearR6250 Firmware Version < 1.0.4.30
   NetgearR6250 Version-
NetgearR6300 Firmware Version < 1.0.4.32
   NetgearR6300 Versionv2
NetgearR6400 Firmware Version < 1.0.1.44
   NetgearR6400 Version-
NetgearR6400 Firmware Version < 1.0.2.60
   NetgearR6400 Versionv2
NetgearR6700 Firmware Version < 1.0.1.48
   NetgearR6700 Version-
NetgearR6700 Firmware Version < 1.2.0.24
   NetgearR6700 Versionv2
NetgearR6800 Firmware Version < 1.2.0.24
   NetgearR6800 Version-
NetgearR6900 Firmware Version < 1.0.1.48
   NetgearR6900 Version-
NetgearR6900p Firmware Version < 1.3.1.44
   NetgearR6900p Version-
NetgearR6900 Firmware Version < 1.2.0.24
   NetgearR6900 Versionv2
NetgearR7000 Firmware Version < 1.0.9.34
   NetgearR7000 Version-
NetgearR7000p Firmware Version < 1.3.1.44
   NetgearR7000p Version-
NetgearR7100lg Firmware Version < 1.0.0.48
   NetgearR7100lg Version-
NetgearR7300 Firmware Version < 1.0.0.68
   NetgearR7300 Version-
NetgearR7500 Firmware Version < 1.0.0.124
   NetgearR7500 Version-
NetgearR7500 Firmware Version < 1.0.3.38
   NetgearR7500 Versionv2
NetgearR7900 Firmware Version < 1.0.2.16
   NetgearR7900 Version-
NetgearR7900p Firmware Version < 1.4.1.24
   NetgearR7900p Version-
NetgearR8000 Firmware Version < 1.0.4.18
   NetgearR8000 Version-
NetgearR8000p Firmware Version < 1.4.1.24
   NetgearR8000p Version-
NetgearR8300 Firmware Version < 1.0.2.122
   NetgearR8300 Version-
NetgearR8500 Firmware Version < 1.0.2.122
   NetgearR8500 Version-
NetgearWn3000rp Firmware Version < 1.0.0.68
   NetgearWn3000rp Version-
NetgearWn3000rp Firmware Version < 1.0.0.68
   NetgearWn3000rp Versionv2
NetgearWndr3400 Firmware Version < 1.0.1.18
   NetgearWndr3400 Versionv3
NetgearWndr3700 Firmware Version < 1.0.2.102
   NetgearWndr3700 Versionv4
NetgearWndr3700 Firmware Version < 1.1.0.54
   NetgearWndr3700 Versionv5
NetgearWndr4300 Firmware Version < 1.0.2.104
   NetgearWndr4300 Versionv1
NetgearWndr4300 Firmware Version < 1.0.0.56
   NetgearWndr4300 Versionv2
NetgearWndr4500 Firmware Version < 1.0.0.56
   NetgearWndr4500 Versionv3
NetgearWnr1000 Firmware Version < 1.1.0.54
   NetgearWnr1000 Versionv4
NetgearWnr2020 Firmware Version < 1.1.0.54
   NetgearWnr2020 Version-
NetgearWnr2050 Firmware Version < 1.1.0.54
   NetgearWnr2050 Version-
NetgearWnr3500l Firmware Version < 1.2.0.54
   NetgearWnr3500l Versionv2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.464
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
cve@mitre.org 7.1 2.8 4.2
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.