TROYANOSYVIRUS
← Retour aux CVEs

CVE-2020-26929

HIGH
7.3

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230 before 1.1.0.100.

Details CVE

Score CVSS v3.17.3
SeveriteHIGH
Vecteur CVSSCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Vecteur d'attaqueADJACENT_NETWORK
ComplexiteLOW
Privileges requisLOW
Interaction utilisateurNONE
Publie10/9/2020
Derniere modification11/21/2024
Sourcenvd
Observations honeypot0

Produits affectes

netgear:r6220netgear:r6220_firmwarenetgear:r6230netgear:r6230_firmware

Faiblesses (CWE)

CWE-77

References

https://kb.netgear.com/000062323/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0011(cve@mitre.org)
https://kb.netgear.com/000062323/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0011(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.