Command Injection Vulnerability in NETGEAR Routers
CVE-2020-35793

6.1MEDIUM

Key Information:

Vendor

Netgear
Status
D7800 Firmware
Vendor
CVE Published:
30 December 2020

What is CVE-2020-35793?

Certain NETGEAR routers are susceptible to a command injection vulnerability that can be exploited by an authenticated user. This issue allows attackers to execute arbitrary commands on the affected devices. Models such as D7800, R7500v2, R7800, R8900, and R9000 are impacted if they are running versions prior to the specified updates. Immediate action is recommended to secure these devices and mitigate potential risks.

References

https://kb.netgear.com/000062725/Security-Advisory-for-Po...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.