CVE-2019-20701

CVSS 7.1 HIGHEPSS 0.7%

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.

CVSS:3.0/AC:H/AV:A/A:H/C:H/I:H/PR:L/S:U/UI:N

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://kb.netgear.com/000061218/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2018-0337