Command Injection Vulnerability in NETGEAR Routers and Gateways
CVE-2019-20711
7.1HIGH
Summary
Certain NETGEAR routers and gateways are susceptible to command injection vulnerabilities, which can be exploited by authenticated users. This issue is present in specific versions of the D3600, D6000, and XR500 models. An attacker with valid credentials may execute arbitrary commands, potentially compromising the integrity and availability of the affected devices. It is crucial for users to update their firmware to the latest versions to mitigate this risk.
References
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved