← Back to CVEs
CVE-2020-26910
HIGH8.4
Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.
CVE Details
CVSS v3.1 Score8.4
SeverityHIGH
CVSS VectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack VectorADJACENT_NETWORK
ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
Published10/9/2020
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
netgear:cbr40netgear:cbr40_firmwarenetgear:rbk752netgear:rbk752_firmwarenetgear:rbk852netgear:rbk852_firmwarenetgear:rbr750netgear:rbr750_firmwarenetgear:rbr850netgear:rbr850_firmwarenetgear:rbs750netgear:rbs750_firmwarenetgear:rbs850netgear:rbs850_firmware
Weaknesses (CWE)
CWE-77
References
https://kb.netgear.com/000062343/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0031(cve@mitre.org)
https://kb.netgear.com/000062343/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0031(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.