CVE-2020-35798
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 before 1.0.2.74, R7850 before 1.0.5.60, R7900 before 1.0.4.26, R7960P before 1.4.1.50, R8000 before 1.0.4.52, R7900P before 1.4.1.50, R8000P before 1.4.1.50, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX200 before 1.0.1.12, RAX45 before 1.0.2.66, RAX50 before 1.0.2.66, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, RBS850 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RS400 before 1.5.0.48, and XR300 before 1.0.3.50.
Affected (30)
Products: Netgear: R6400v2 Firmware, R6700v3 Firmware, R6900p Firmware, R7000 Firmware, R7000p Firmware, R7800 Firmware, R7850 Firmware, R7900 Firmware, R7960p Firmware, R8000 Firmware, R7900p Firmware, R8000p Firmware, Rax15 Firmware, Rax20 Firmware, Rax200 Firmware, Rax45 Firmware, Rax50 Firmware, Rax75 Firmware, Rax80 Firmware, Rbk752 Firmware, Rbr750 Firmware, Rbs750 Firmware, Rbk852 Firmware, Rbr850 Firmware, Rbs850 Firmware, Rbk842 Firmware, Rbr840 Firmware, Rbs840 Firmware, Rs400 Firmware, Xr300 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.84 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6400v2 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.84 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700v3 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.2.124 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900p | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.11.100 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.2.124 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000p | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.74 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7800 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.60 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7850 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.26 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.50 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7960p | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.52 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8000 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.50 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900p | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.50 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8000p | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.64 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax15 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.64 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax20 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.12 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax200 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.66 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax45 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.66 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax50 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax75 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax80 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk752 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr750 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs750 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.15.25 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk852 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.15.25 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr850 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.15.25 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs850 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.15.25 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk842 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.15.25 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr840 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.15.25 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs840 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.5.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rs400 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.50 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr300 | All versions |
References (2)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.