Command Injection Vulnerability in NETGEAR Routers and Gateways
CVE-2019-20680

7HIGH

Key Information:

Vendor

Netgear
Status
D7000 Firmware
Vendor
CVE Published:
15 April 2020

What is CVE-2019-20680?

Certain NETGEAR routers and gateways are vulnerable to command injection, which can be exploited by authenticated users, potentially allowing them to execute arbitrary commands on the affected devices. This vulnerability impacts various models and requires the user to be logged in, making it particularly concerning for users with weak or compromised credentials. Users should ensure they have updated to the latest firmware versions to mitigate the risk of exploitation.

References

https://kb.netgear.com/000061459/Security-Advisory-for-Po...
x_refsource_CONFIRM

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.