CVE-2019-20702 - Certain NETGEAR devices are affected by command injection by an authenticated user

Back Back to CVE browser

HIGH

Certain NETGEAR devices are affected by command injection by an authenticated user

Published Apr 16, 2020

8.0

HIGH

CVSS 3.1

EPSS 0.78%

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-77

References (1)

https://kb.netgear.com/000061227/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2018-0394
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://kb.netgear.com/000061227/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2018-0394		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 16, 2020

Updated Aug 5, 2024

Reserved Apr 15, 2020

Link CVE-2019-20702

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-20702

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-20702