CVE-2026-9214: R7000 Firmware: hatalı girdi doğrulama

Açıklama (NVD)

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Özet bilgiler

Ürün

Netgear R7000 Firmware

CVSS v3.1

4.5 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

CVSS v4.0

4.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

EPSS

%0,23 (yüzdelik 14)

CWE

CWE-20

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• kb.netgear.com
• www.netgear.com
• CWE-20