Orta CVSS 4.5
CVE-2026-11737: Rax20 Firmware: hatalı girdi doğrulama
Açıklama (NVD)
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
Özet bilgiler
- Ürün
- Netgear Rax20 Firmware
- CVSS v3.1
- 4.5
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - CVSS v4.0
- 4.3
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber - EPSS
- %0,33 (yüzdelik 26)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| netgear-rax20-firmware | — | — | 1.0.18.144 |
| netgear-rax41-firmware | — | — | 1.1.6.36 |
| netgear-rax41v2-firmware | — | — | 1.1.6.36 |
| netgear-rax42-firmware | — | — | 1.1.6.36 |
| netgear-rax42v2-firmware | — | — | 1.1.6.36 |
| netgear-rax43-firmware | — | — | 1.1.6.36 |
| netgear-rax43v2-firmware | — | — | 1.1.6.36 |
| netgear-rax45-firmware | — | — | 1.0.17.142 |
| netgear-rax49s-firmware | — | — | 1.1.6.36 |
| netgear-rax50-firmware | — | — | 1.1.6.36 |
| netgear-rax50v2-firmware | — | — | 1.1.6.36 |
| netgear-rax54s-firmware | — | — | 1.1.6.36 |
| netgear-rax54sv2-firmware | — | — | 1.1.6.36 |