Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-83560
HistorySep 18, 2021 - 12:00 a.m.

NETGEAR R6020 Command Injection Vulnerability

2021-09-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
netgear
r6020
command injection
vulnerability
ntp_server
setup
administrator
shell commands
version 1.0.0.48

EPSS

0.001

Percentile

40.2%

The NETGEAR R6020 is a router from Netgear, Inc. NETGEAR R6020 is vulnerable to a command injection vulnerability in version 1.0.0.48, which stems from a lack of validation and filtering in the ntp_server field of setup.cgi. An attacker with administrator status can use this vulnerability to inject and execute arbitrary shell commands.

EPSS

0.001

Percentile

40.2%