CVE-2020-35797 - NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker

CRITICAL

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker

Published Dec 29, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.13%

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23452		Advisory
https://kb.netgear.com/000062688/Security-Advisory-for-Pre-Authentication-Command-Injection-on-NMS300-PSV-2020-0560		x_refsource_MISCVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Dec 29, 2020

Updated Aug 4, 2024

Reserved Dec 29, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Dec 29, 2020

Updated Aug 4, 2024

Exploited since n/a