CVE-2019-20709
Certain NETGEAR devices are affected by command injection by an authenticated user
High · published April 16, 2020
What it is
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
The record
Technical detail
- CVSS v3.0
- 7.1 · HIGH
- Vector
- CVSS:3.0/AC:H/AV:A/A:H/C:H/I:H/PR:L/S:U/UI:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.01337 · 71.0th percentile
- Published
- 2020-04-16T15:28Z
EPSS history
Timeline