GCVE - cpe:2.3:o:netgear:wc7500_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:wc7500_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Wc7500 Firmware (`1a212410-7bc1-5b2c-ae0b-49a768b969f0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-26931`	vulnerable	2026-06-08 05:23:51.925768	Details available MEDIUM (5.9) Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24. Published: 2020-10-09T06:24:55.000Z Updated: 2024-08-04T16:03:23.058Z Open on db.gcve.eu Reference links https://kb.netgear.com/000062321/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Wireless-Controllers-PSV-2020-0268	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-26923`	vulnerable	2026-06-08 05:23:51.886096	Details available MEDIUM (4.3) Certain NETGEAR devices are affected by stored XSS. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24. Published: 2020-10-09T06:27:48.000Z Updated: 2024-08-04T16:03:22.835Z Open on db.gcve.eu Reference links https://kb.netgear.com/000062329/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Wireless-Controllers-PSV-2020-0180	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-26922`	vulnerable	2026-06-08 05:23:51.879576	Details available MEDIUM (6.4) Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24. Published: 2020-10-09T06:28:06.000Z Updated: 2024-08-04T16:03:22.927Z Open on db.gcve.eu Reference links https://kb.netgear.com/000062330/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Wireless-Controllers-PSV-2020-0139	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-21123`	vulnerable	2026-06-08 05:11:28.605485	Details available HIGH (8.8) Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WC7500 before 6.5.3.9, WC7520 before 6.5.3.9, WC7600v1 before 6.5.3.9, and WC7600v2 before 6.5.3.9. Published: 2020-04-22T15:48:06.000Z Updated: 2024-08-05T12:19:27.638Z Open on db.gcve.eu Reference links https://kb.netgear.com/000060235/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Wireless-Controllers-PSV-2018-0230	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11106`	vulnerable	2026-06-08 05:10:37.896282	Details available NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to 6.5.3.5; WC7600v2, running firmware versions prior to 6.5.3.5; and WC9500, running firmware versions prior to 6.5.3.5. Published: 2020-04-01T16:31:45.000Z Updated: 2024-08-05T07:54:36.460Z Open on db.gcve.eu Reference links https://kb.netgear.com/000058243/Security-Advisory-for-Pre-Authentication-Command-Injection-in-request-handler-php-on-Some-Wireless-Controllers-PSV-2018-0051	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.