Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
21 Nov 2024, 05:20
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 7.7
v3 : 9.6 |
References | () https://kb.netgear.com/000062347/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0264 - Vendor Advisory |
Information
Published : 2020-10-09 07:15
Updated : 2024-11-21 05:20
NVD link : CVE-2020-26907
Mitre link : CVE-2020-26907
CVE.ORG link : CVE-2020-26907
JSON object : View
Products Affected
netgear
- rbk852_firmware
- rbr850
- rbs850_firmware
- rbr850_firmware
- rbs850
- rbk852
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')