CVE-2019-20706 - Certain NETGEAR devices are affected by command injection by an authenticated user

HIGH

Certain NETGEAR devices are affected by command injection by an authenticated user

Published Apr 16, 2020

8.0

HIGH

CVSS 3.1

EPSS 1.64%

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.60 and XR500 before 2.3.2.32.

No remediation recorded yet.

Weaknesses (1)

CWE-77

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-11245		Advisory
https://kb.netgear.com/000061223/Security-Advisory-for-Post-Authentication-Command-Injection-on-R7800-and-XR500-PSV-2018-0354		x_refsource_CONFIRMVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Apr 16, 2020

Updated Aug 5, 2024

Reserved Apr 15, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Apr 16, 2020

Updated Aug 5, 2024

Exploited since n/a