CVE-2019-20707

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.60 and XR500 before 2.3.2.32...

CVE-2019-20707

CVE-2019-20707 affects NETGEAR R7800 (before 1.0.2.60) and XR500 (before 2.3.2.32). An authenticated user can perform a command injection, enabling arbitrary OS commands. Root cause: insufficient input filtering during command construction from external data. Impact, per sources: high (confidenti...