CVE-2020-35792
HIGH8.3CVSS v3
5.2CVSS v2
0.52%
EPSS (exploit probability)
CWE-77CWE
Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68.
CVSS v3 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
Affected routers (1)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Netgear | Netgear Nighthawk R7800 | — |
versionEndExcluding=1.0.2.68 | 1.0.2.68 | Patched |