CVE-2020-35797

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-12-30

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Nms300 Firmware (Netgear)

References

• https://kb.netgear.com/000062688/Security-Advisory-for-Pre-Authentication-Command-Injection-on-NMS300-PSV-2020-0560