İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 6.4

CVE-2026-11739: Ms90 Firmware: işletim sistemi komut enjeksiyonu

Yayın: · Güncelleme:

Açıklama (NVD)

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

Özet bilgiler

Ürün
Netgear Ms90 Firmware
CVSS v3.1
6.4 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
4.9 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
EPSS
%2,55 (yüzdelik 85)
CWE
CWE-78
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
netgear-ms90-firmware——1.0.2.46
netgear-rax20-firmware——1.0.17.142
netgear-rax200-firmware——1.0.11.148
netgear-rax35-firmware——1.0.17.142
netgear-rax35v2-firmware——1.0.17.142
netgear-rax41-firmware——1.1.6.36
netgear-rax41v2-firmware——1.1.6.36
netgear-rax42-firmware——1.1.6.36
netgear-rax42v2-firmware——1.1.6.36
netgear-rax43-firmware——1.1.6.36
netgear-rax43v2-firmware——1.1.6.36
netgear-rax45-firmware——1.0.17.142
netgear-rax49s-firmware——1.1.6.36
netgear-rax50-firmware——1.1.6.36
netgear-rax50v2-firmware——1.1.6.36
netgear-rax54s-firmware——1.1.6.36
netgear-rax54sv2-firmware——1.1.6.36
netgear-rax80-firmware——1.0.11.148
netgear-raxe500-firmware——1.2.14.110
netgear-rs700-firmware——1.0.9.6
netgear-xr1000-firmware——1.1.0.22
netgear-xr1000v2-firmware——1.1.0.22
netgear-mr60-firmware——1.1.8.142
netgear-mr70-firmware——1.0.4.48
netgear-mr90-firmware——1.0.2.46
netgear-ms60-firmware——1.1.8.142
netgear-ms70-firmware——1.0.4.48

Kaynaklar

Uygulamada aç Tüm CVE kayıtları