NETGEAR WC9500 Firmware vulnerabilities

4 CVEs affecting NETGEAR WC9500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-26931, published 2020-10-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-11106, published 2020-04-01. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to…
CVE-2020-26923, published 2020-10-09. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by stored XSS. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.
CVE-2020-26922, published 2020-10-09. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.
CVE-2020-26931, published 2020-10-09. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.