2 lines
4.8 KiB
JSON
2 lines
4.8 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"JR6150","vendor":"NETGEAR","versions":[{"lessThanOrEqual":"1.0.1.26","status":"affected","version":"0","versionType":"custom"}]}],"source":"a2826606-91e7-4eb6-899e-8484bd4575d5"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:netgear:jr6150_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EA9FEFBD-FE94-41F0-809F-DF60403ED087","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:*","matchCriteriaId":"D67167E5-81D2-4892-AF41-CBB6271232D1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[{"sourceIdentifier":"a2826606-91e7-4eb6-899e-8484bd4575d5","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no \nfurther security updates are planned. NETGEAR strongly recommends \nreplacing these devices with newer NETGEAR models to ensure continued \nsecurity support and updates.\n\n\n\nThis vulnerability has been identified through firmware emulation in a controlled research environment and has not been verified on production hardware."},{"lang":"es","value":"Validación de entrada insuficiente en el NETGEAR JR6150 (Router WiFi AC750 802.11ac de doble banda Gigabit lanzado en 2014) permite a los usuarios conectados a las redes WiFi locales ejecutar comandos del sistema operativo. El NETGEAR JR6150 ha alcanzado la fase de fin de soporte a partir de 2018, y no se planean más actualizaciones de seguridad. NETGEAR recomienda encarecidamente reemplazar estos dispositivos con modelos NETGEAR más nuevos para garantizar un soporte y actualizaciones de seguridad continuos.\n\nEsta vulnerabilidad ha sido identificada mediante emulación de firmware en un entorno de investigación controlado y no ha sido verificada en hardware de producción."}],"id":"CVE-2026-0419","lastModified":"2026-07-23T08:10:00.137","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.1,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","availabilityRequirement":"NOT_DEFINED","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"LOW"},"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0419","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-06-09T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-06-09T17:17:00.000","references":[{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","tags":["Vendor Advisory"],"url":"https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","tags":["Product"],"url":"https://www.netgear.com/support/product/jr6150"}],"sourceIdentifier":"a2826606-91e7-4eb6-899e-8484bd4575d5","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","type":"Secondary"}]}
|