CVE-2020-27866

🗓️ 11 Feb 2021 23:35:39Reported by zdiType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 124 Views

This vulnerability in NETGEAR routers allows bypassing authentication, leading to potential code execution as root

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-27866	17 Mar 202113:30	–	circl
CNNVD	Multiple Netgear Products Licensing Issues Vulnerabilities	11 Feb 202100:00	–	cnnvd
Cvelist	CVE-2020-27866	11 Feb 202123:35	–	cvelist
Nuclei	NETGEAR - Authentication Bypass	22 Jun 202605:20	–	nuclei
Nuclei	SonarQube - Authentication Bypass	22 Jun 202605:20	–	nuclei
NVD	CVE-2020-27866	12 Feb 202100:15	–	nvd
Prion	Authentication flaw	12 Feb 202100:15	–	prion
Prion	Authentication flaw	30 Jun 202115:15	–	prion
RedhatCVE	CVE-2020-27866	5 Feb 202515:01	–	redhatcve
RedhatCVE	CVE-2021-35973	6 Feb 202503:12	–	redhatcve

NVD

Vulners

Node

netgear ac2100_firmwareRange<1.2.0.76

AND

netgear ac2100Match-

Node

netgear ac2400_firmwareRange<1.2.0.76

AND

netgear ac2400Match-

Node

netgear ac2600_firmwareRange<1.2.0.76

AND

netgear ac2600Match-

Node

netgear r6700_firmwareRange<1.2.0.76

AND

netgear r6700Matchv2

Node

netgear r6800_firmwareRange<1.2.0.76

AND

netgear r6800Match-

Node

netgear r6900_firmwareRange<1.2.0.76

AND

netgear r6900Matchv2

Node

netgear r7200_firmwareRange<1.2.0.76

AND

netgear r7200Match-

Node

netgear r7350_firmwareRange<1.2.0.76

AND

netgear r7350Match-

Node

netgear r7400_firmwareRange<1.2.0.76

AND

netgear r7400Match-

Node

netgear r7450_firmwareRange<1.2.0.76

AND

netgear r7450Match-

Node

netgear r6220_firmwareRange<1.1.0.104

AND

netgear r6220Match-

Node

netgear r6230_firmwareRange<1.1.0.104

AND

netgear r6230Match-

Node

netgear r6260_firmwareRange<1.1.0.78

AND

netgear r6260Match-

Node

netgear r6330_firmwareRange<1.1.0.78

AND

netgear r6330Match-

Node

netgear r6350_firmwareRange<1.1.0.78

AND

netgear r6350Match-

Node

netgear r6850_firmwareRange<1.1.0.78

AND

netgear r6850Match-

Node

netgear r6120_firmwareRange<1.0.0.76

AND

netgear r6120Match-

Node

netgear r6020_firmwareRange<1.0.0.48

AND

netgear r6020Match-

Node

netgear r6080_firmwareRange<1.0.0.48

AND

netgear r6080Match-

[
  {
    "product": "Multiple Routers",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.2.0.62_1.0.1"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-1451/
kb	www.kb.netgear.com/000062641/Security-Advisory-for-Password-Recovery-Vulnerabilities-on-Some-Routers

17 Jun 2026 03:09Current

8.9High risk

Vulners AI Score8.9

CVSS 28.3

CVSS 3.18.8

CVSS 38.8

EPSS0.08656

netgear routers vulnerability authentication bypass code execution root access mini_httpd service cve-2020-27866