CVE-2020-27867

🗓️ 11 Feb 2021 23:35:40Reported by zdiType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 75 Views

CVE-2020-27867 allows network-adjacent attackers to execute arbitrary code on NETGEAR routers. Auth required but bypassable. Flaw in mini_httpd parsing funjsq_access_token

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-27867	21 Oct 202317:25	–	circl
CNNVD	Command Injection Vulnerability in Multiple Netgear Products	11 Feb 202100:00	–	cnnvd
Cvelist	CVE-2020-27867	11 Feb 202123:35	–	cvelist
EUVD	EUVD-2020-20360	7 Oct 202500:30	–	euvd
NVD	CVE-2020-27867	12 Feb 202100:15	–	nvd
OSV	CVE-2020-27867	12 Feb 202100:15	–	osv
Prion	Design/Logic Flaw	12 Feb 202100:15	–	prion
VulnCheck KEV	VulnCheck KEV: CVE-2020-27867	9 Oct 202500:00	–	vulncheck_kev
Zero Day Initiative	NETGEAR Multiple Routers mini_httpd Command Injection Remote Code Execution Vulnerability	21 Dec 202000:00	–	zdi

NVD

Vulners

Node

netgear ac2100_firmwareRange<1.2.0.76

AND

netgear ac2100Match-

Node

netgear ac2400_firmwareRange<1.2.0.76

AND

netgear ac2400Match-

Node

netgear ac2600_firmwareRange<1.2.0.76

AND

netgear ac2600Match-

Node

netgear r6700_firmwareRange<1.2.0.76

AND

netgear r6700Matchv2

Node

netgear r6800_firmwareRange<1.2.0.76

AND

netgear r6800Match-

Node

netgear r6900_firmwareRange<1.2.0.76

AND

netgear r6900Matchv2

Node

netgear r7200_firmwareRange<1.2.0.76

AND

netgear r7200Match-

Node

netgear r7350_firmwareRange<1.2.0.76

AND

netgear r7350Match-

Node

netgear r7400_firmwareRange<1.2.0.76

AND

netgear r7400Match-

Node

netgear r7450_firmwareRange<1.2.0.76

AND

netgear r7450Match-

Node

netgear r6220_firmwareRange<1.1.0.104

AND

netgear r6220Match-

Node

netgear r6230_firmwareRange<1.1.0.104

AND

netgear r6230Match-

Node

netgear r6260_firmwareRange<1.1.0.78

AND

netgear r6260Match-

Node

netgear r6330_firmwareRange<1.1.0.78

AND

netgear r6330Match-

Node

netgear r6350_firmwareRange<1.1.0.78

AND

netgear r6350Match-

Node

netgear r6850_firmwareRange<1.1.0.78

AND

netgear r6850Match-

Node

netgear r6120_firmwareRange<1.0.0.76

AND

netgear r6120Match-

Node

netgear r6020_firmwareRange<1.0.0.48

AND

netgear r6020Match-

Node

netgear r6080_firmwareRange<1.0.0.48

AND

netgear r6080Match-

[
  {
    "product": "Multiple Routers",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.2.0.62_1.0.1"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-1423/
kb	www.kb.netgear.com/000062641/Security-Advisory-for-Password-Recovery-Vulnerabilities-on-Some-Routers

17 Jun 2026 03:09Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.8

CVSS 27.7

CVSS 36.8

EPSS0.02344