NETGEAR WC7520 Firmware vulnerabilities

2 CVEs affecting NETGEAR WC7520 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-21123, published 2020-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-11106, published 2020-04-01. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to…
CVE-2018-21123, published 2020-04-22. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WC7500 before 6.5.3.9, WC7520 before 6.5.3.9, WC7600v1 before 6.5.3.9, and WC7600v2 before…