Lucene search

K
cvelistMitreCVELIST:CVE-2020-35792
HistoryDec 29, 2020 - 11:39 p.m.

CVE-2020-35792

2020-12-2923:39:33
mitre
www.cve.org
4
netgear
command injection
authenticated user
r7500v2
r8900
r9000
r7800

CVSS3

8.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

EPSS

0

Percentile

12.6%

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68.

CVSS3

8.3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

EPSS

0

Percentile

12.6%

Related for CVELIST:CVE-2020-35792