CVE-2020-35792

Severity CVSS v4.0:
Pending analysis
Type:
CWE-77 Command Injection
Publication date:
30/12/2020
Last modified:
31/12/2020

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:* 1.0.3.48 (excluding)
cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:* 1.0.5.2 (excluding)
cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:* 1.0.5.2 (excluding)
cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:* 1.0.2.68 (excluding)
cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*