CVE-2019-20711

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

CVE-2019-20711

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32...

CVE-2019-20711

NETGEAR D3600/D6000 and XR500 are affected by an OS command injection (CVE-2019-20711). The root cause is improper filtering of special characters/commands when constructing executable OS commands from external input, allowing an authenticated user to execute commands. Affected versions: D3600 be...