PT-2020-10693 · NetGear · D6400+14
Wayne Low
·
Published
2020-04-16
·
Updated
2020-08-24
·
CVE-2019-20718
CVSS v3.1
6.8
Medium
| Vector | AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N |
Name of the Vulnerable Software and Affected Versions
NETGEAR D6220 versions prior to 1.0.0.48
NETGEAR D6400 versions prior to 1.0.0.82
NETGEAR D7000v2 versions prior to 1.0.0.52
NETGEAR D8500 versions prior to 1.0.3.43
NETGEAR R6250 versions prior to 1.0.4.34
NETGEAR R6400 versions prior to 1.0.1.44
NETGEAR R6400v2 versions prior to 1.0.2.62
NETGEAR R7100LG versions prior to 1.0.0.48
NETGEAR R7300DST versions prior to 1.0.0.68
NETGEAR R7900 versions prior to 1.0.3.8
NETGEAR R7900P versions prior to 1.4.1.30
NETGEAR R8000 versions prior to 1.0.4.28
NETGEAR R8000P versions prior to 1.4.1.30
NETGEAR R8300 versions prior to 1.0.2.128
NETGEAR R8500 versions prior to 1.0.2.128
Description
The issue allows command injection by an authenticated user.
Recommendations
For NETGEAR D6220 version prior to 1.0.0.48, update to version 1.0.0.48 or later.
For NETGEAR D6400 version prior to 1.0.0.82, update to version 1.0.0.82 or later.
For NETGEAR D7000v2 version prior to 1.0.0.52, update to version 1.0.0.52 or later.
For NETGEAR D8500 version prior to 1.0.3.43, update to version 1.0.3.43 or later.
For NETGEAR R6250 version prior to 1.0.4.34, update to version 1.0.4.34 or later.
For NETGEAR R6400 version prior to 1.0.1.44, update to version 1.0.1.44 or later.
For NETGEAR R6400v2 version prior to 1.0.2.62, update to version 1.0.2.62 or later.
For NETGEAR R7100LG version prior to 1.0.0.48, update to version 1.0.0.48 or later.
For NETGEAR R7300DST version prior to 1.0.0.68, update to version 1.0.0.68 or later.
For NETGEAR R7900 version prior to 1.0.3.8, update to version 1.0.3.8 or later.
For NETGEAR R7900P version prior to 1.4.1.30, update to version 1.4.1.30 or later.
For NETGEAR R8000 version prior to 1.0.4.28, update to version 1.0.4.28 or later.
For NETGEAR R8000P version prior to 1.4.1.30, update to version 1.4.1.30 or later.
For NETGEAR R8300 version prior to 1.0.2.128, update to version 1.0.2.128 or later.
For NETGEAR R8500 version prior to 1.0.2.128, update to version 1.0.2.128 or later.
Fix
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
D6220
D6400
D7000V2
D8500
R6250
R6400
R6400V2
R7100Lg
R7300Dst
R7900
R7900P
R8000
R8000P
R8300
R8500