Lucene search

[email protected]CVE-2020-26922

HistoryOct 09, 2020 - 7:15 a.m.

CVE-2020-26922

2020-10-0907:15:17

CWE-77

[email protected]

web.nvd.nist.gov

netgear

devices

authenticated

command injection

nvd

cve-2020-26922

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.

Affected configurations

NVD

Node

netgearwc7500_firmwareRange<6.5.5.24

AND

netgearwc7500Match-

Node

netgearwc7600_firmwareRange<6.5.5.24

AND

netgearwc7600Match-

Node

netgearwc7600v2_firmwareRange<6.5.5.24

AND

netgearwc7600v2Match-

Node

netgearwc9500_firmwareRange<6.5.5.24

AND

netgearwc9500Match-

CPENameOperatorVersion
netgear:wc7500_firmwarenetgear wc7500 firmwarelt6.5.5.24

CPE	Name	Operator	Version
netgear:wc7500_firmware	netgear wc7500 firmware	lt	6.5.5.24

References

kb.netgear.com/000062330/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Wireless-Controllers-PSV-2020-0139

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-26922

cvelist1 nvd1 prion1