CVE-2020-11790

NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers

Critical · published April 15, 2020

CVSS v3.0
9.4
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

🔥 Unauthenticated attackers can gain remote code execution on NETGEAR R7800 devices, and it only gets worse from here! Think of your NETGEAR R7800 as a front door left wide open with a welcome mat that says 'Come on in!'—anyone can just stroll right through without knocking! If exploited, an attacker could take complete control of your device, allowing them to intercept sensitive data, manipulate network settings, or even launch attacks on other devices in your network. This is absolutely devastating for personal data security and network integrity!

Put simply

Think of your NETGEAR R7800 as a front door left wide open with a welcome mat that says 'Come on in!'—anyone can just stroll right through without knocking! This vulnerability exists because the device fails to properly authenticate requests, allowing unauthenticated users to execute arbitrary commands remotely.

What to do

If exploited, an attacker could take complete control of your device, allowing them to intercept sensitive data, manipulate network settings, or even launch attacks on other devices in your network. This is absolutely devastating for personal data security and network integrity! Immediately update your NETGEAR R7800 to version 1.0.2.68 or later to close this dangerous exploit. Additionally, review your network settings to ensure no unauthorized access has occurred. It's essential to remain vigilant! You've got this! Follow these steps, and you’ll have your network locked down in no time! 🛡️

The record
Technical detail
CVSS v3.0
9.4 · CRITICAL
Vector
CVSS:3.0/AC:L/AV:N/A:L/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.02417 · 84.1th percentile
Published
2020-04-15T17:07Z
EPSS history
Timeline
  • 15 APR 17:07Z
    NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers
    cvelistv5