Command Injection Vulnerability in NETGEAR Routers and Gateways
CVE-2019-20711

7.1HIGH

Key Information:

Vendor

Netgear
Status
Xr500 Firmware
Vendor
CVE Published:
16 April 2020

What is CVE-2019-20711?

Certain NETGEAR routers and gateways are susceptible to command injection vulnerabilities, which can be exploited by authenticated users. This issue is present in specific versions of the D3600, D6000, and XR500 models. An attacker with valid credentials may execute arbitrary commands, potentially compromising the integrity and availability of the affected devices. It is crucial for users to update their firmware to the latest versions to mitigate this risk.

References

https://kb.netgear.com/000061217/Security-Advisory-for-Po...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.