CVE-2021-20173

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device

published December 30, 2021

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check via the SOAP interface, the device is susceptible to command injection via preconfigured values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03226 · 88.2th percentile
Published
2021-12-30T21:31Z
EPSS history
Timeline
  • 30 DEC 21:31Z
    Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device
    cvelistv5