CVE-2018-21117

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler

High · published April 22, 2020

CVSS v3.0
8.8
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01052 · 64.0th percentile
Published
2020-04-22T15:00Z
EPSS history
Timeline
  • 22 APR 15:00Z
    NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler
    cvelistv5