CVE-2019-20702

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.

Score

CVSS 3.1 8.0 High

Status

Modified - cve@mitre.org

Published

2020-04-16

Last modified

2024-08-05

Weaknesses

CWE-77

Affected products

• D3600 Firmware (Netgear)
• D6000 Firmware (Netgear)
• Xr500 Firmware (Netgear)

References

• https://kb.netgear.com/000061227/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gatewa…