Orta CVSS 4.4
CVE-2026-11738: Be9300 Firmware: hatalı girdi doğrulama
Açıklama (NVD)
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
Özet bilgiler
- Ürün
- Netgear Be9300 Firmware
- CVSS v3.1
- 4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - CVSS v4.0
- 4.3
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber - EPSS
- %0,40 (yüzdelik 35)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| netgear-be9300-firmware | — | — | 1.0.1.84 |
| netgear-mr60-firmware | — | — | 1.1.8.142 |
| netgear-ms60-firmware | — | — | 1.1.8.142 |
| netgear-r6700ax-firmware | — | — | 1.0.18.164 |
| netgear-rax10-firmware | — | — | 1.0.5.50 |
| netgear-rax120-firmware | — | — | 1.2.10.56 |
| netgear-rax120v2-firmware | — | — | 1.2.10.56 |
| netgear-rax20-firmware | — | — | 1.0.17.142 |
| netgear-rax28-firmware | — | — | 1.0.14.108 |
| netgear-rax29-firmware | — | — | 1.0.14.108 |
| netgear-rax30-firmware | — | — | 1.0.14.108 |
| netgear-rax36s-firmware | — | — | 1.0.5.50 |
| netgear-rax43-firmware | — | — | 1.0.17.142 |
| netgear-rax45-firmware | — | — | 1.0.17.142 |
| netgear-rax50-firmware | — | — | 1.0.17.142 |
| netgear-rax70-firmware | — | — | 1.0.19.172 |
| netgear-rbr760-firmware | — | — | 6.3.8.11 |
| netgear-rbs760-firmware | — | — | 6.3.8.11 |
| netgear-rs100-firmware | — | — | 1.0.1.80 |
| netgear-rs200-firmware | — | — | 1.0.1.90 |
| netgear-rs280-firmware | — | — | 1.0.1.90 |
| netgear-rs300-firmware | — | — | 1.0.1.90 |
| netgear-rs500-firmware | — | — | 1.0.1.90 |
| netgear-rs600-firmware | — | — | 1.0.1.90 |
| netgear-rs70-firmware | — | — | 1.0.1.80 |
| netgear-rs90-firmware | — | — | 1.0.1.80 |