CVE-2019-20706

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.60 and XR500 before 2.3.2.32.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2020-04-16

Last modified

2024-08-05

Weaknesses

CWE-77

Affected products

• R7800 Firmware (Netgear)
• Xr500 Firmware (Netgear)

References

• https://kb.netgear.com/000061223/Security-Advisory-for-Post-Authentication-Command-Injection-on-R7800-and-XR500-PSV-201…