CVE-2020-35789

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user

High · published December 29, 2020

CVSS v3.1
8.8
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.02709 · 85.9th percentile
Published
2020-12-29T23:40Z
EPSS history
Timeline
  • 29 DEC 23:40Z
    NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user
    cvelistv5