Home

CVE-2019-20706

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.60 and XR500 before 2.3.2.32.

Risk Information

Base Score
8.0
MODERATE
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.282

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2019-20706 ,CVE-2019-20707 are affected in r7800_firmware 1.0.2.58NCM
Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability (CVE-2019-20706)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234