CVE-2019-20680
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000v2 before 1.0.0.53, R6220 before 1.1.0.80, R6260 before 1.1.0.64, R6700 before 1.0.2.6, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R6900v2 before 1.2.0.36, R7000 before 1.0.9.60, R7000P before 1.3.1.64, R7800 before 1.0.2.60, R7900 before 1.0.3.8, R7900P before 1.4.1.30, R8000 before 1.0.4.46, R8000P before 1.4.1.30, R8300 before 1.0.2.128, R8500 before 1.0.2.128, R8900 before 1.0.4.12, R9000 before 1.0.4.12, and XR500 before 2.3.2.32.
Published:Apr 15, 2020
Last Modified:Nov 21, 2024
EPS:Apr 15, 2020
EPSS Score:0.00181
CVSS Score:8
Affected Products
Vendor
Product
Action
Vendor
Netgear
Product
D7000
Netgear
D7000
Vendor
Netgear
Product
D7000 Firmware
Netgear
D7000 Firmware
Vendor
Netgear
Product
R6220
Netgear
R6220
Vendor
Netgear
Product
R6220 Firmware
Netgear
R6220 Firmware
Vendor
Netgear
Product
R6260
Netgear
R6260
Vendor
Netgear
Product
R6260 Firmware
Netgear
R6260 Firmware
Vendor
Netgear
Product
R6700
Netgear
R6700
Vendor
Netgear
Product
R6700 Firmware
Netgear
R6700 Firmware
Vendor
Netgear
Product
R6800
Netgear
R6800
Vendor
Netgear
Product
R6800 Firmware
Netgear
R6800 Firmware
Vendor
Netgear
Product
R6900
Netgear
R6900
Vendor
Netgear
Product
R6900 Firmware
Netgear
R6900 Firmware
Vendor
Netgear
Product
R6900p
Netgear
R6900p
Vendor
Netgear
Product
R6900p Firmware
Netgear
R6900p Firmware
Vendor
Netgear
Product
R7000
Netgear
R7000
Vendor
Netgear
Product
R7000 Firmware
Netgear
R7000 Firmware
Vendor
Netgear
Product
R7000p
Netgear
R7000p
Vendor
Netgear
Product
R7000p Firmware
Netgear
R7000p Firmware
Vendor
Netgear
Product
R7800
Netgear
R7800
Vendor
Netgear
Product
R7800 Firmware
Netgear
R7800 Firmware
Vendor
Netgear
Product
R7900
Netgear
R7900
Vendor
Netgear
Product
R7900 Firmware
Netgear
R7900 Firmware
Vendor
Netgear
Product
R7900p
Netgear
R7900p
Vendor
Netgear
Product
R7900p Firmware
Netgear
R7900p Firmware
Vendor
Netgear
Product
R8000
Netgear
R8000
Vendor
Netgear
Product
R8000 Firmware
Netgear
R8000 Firmware
Vendor
Netgear
Product
R8000p
Netgear
R8000p
Vendor
Netgear
Product
R8000p Firmware
Netgear
R8000p Firmware
Vendor
Netgear
Product
R8300
Netgear
R8300
Vendor
Netgear
Product
R8300 Firmware
Netgear
R8300 Firmware
Vendor
Netgear
Product
R8500
Netgear
R8500
Vendor
Netgear
Product
R8500 Firmware
Netgear
R8500 Firmware
Vendor
Netgear
Product
R8900
Netgear
R8900
Vendor
Netgear
Product
R8900 Firmware
Netgear
R8900 Firmware
Vendor
Netgear
Product
R9000
Netgear
R9000
Vendor
Netgear
Product
R9000 Firmware
Netgear
R9000 Firmware
Vendor
Netgear
Product
Xr500
Netgear
Xr500
Vendor
Netgear
Product
Xr500 Firmware
Netgear
Xr500 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
