PT-2020-15926 · NetGear · Netgear R8300

Published 2020-09-01 · Updated 2021-07-21 · CVE-2020-25067

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions NETGEAR R8300 versions prior to 1.0.2.134

Description The issue allows for command injection by an unauthenticated attacker.

Recommendations For versions prior to 1.0.2.134, update to version 1.0.2.134 or later to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2020-25067

Affected Products

Netgear R8300

References · 3

• https://kb.netgear.com/000062158/Security-Advisory-for-Pre-Authentication-Command-Injection-on-R8300-PSV-2020-0211 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25067 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25067 · Security Note