CVE-2019-20704

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

CVE-2019-20704

CVE-2019-20704 affects NETGEAR D3600 (before 1.0.0.76), D6000 (before 1.0.0.76), and XR500 (before 2.3.2.32). The Red Hat/CNVD/CVE records concur that an authenticated user can perform an OS command injection. Root cause is the construction of an executable command from externally input data with...