← Back

CVE-2020-26922

nvd nist
Published: Oct 9, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.

Affected (4)

Netgear
4 products
Wc7500 Firmware
Wc7600 Firmware
Wc7600v2 Firmware
Wc9500 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wc7500 Firmware
Before 6.5.5.24
Running on/withPlatform Versions
Netgear
Wc7500
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wc7600 Firmware
Before 6.5.5.24
Running on/withPlatform Versions
Netgear
Wc7600
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wc7600v2 Firmware
Before 6.5.5.24
Running on/withPlatform Versions
Netgear
Wc7600v2
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wc9500 Firmware
Before 6.5.5.24
Running on/withPlatform Versions
Netgear
Wc9500
All versions

Related CWEs

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.