Vulnerability Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | R7500 Firmware | < 1.0.3.48 |
| Netgear | R7500 | v2 |
| Netgear | R8900 Firmware | < 1.0.5.2 |
| Netgear | R8900 | - |
| Netgear | R9000 Firmware | < 1.0.5.2 |
| Netgear | R9000 | - |
| Netgear | R7800 Firmware | < 1.0.2.68 |
| Netgear | R7800 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000062682/Security-Advisory-for-Post-Authentication-CommaVendor Advisory
- https://kb.netgear.com/000062682/Security-Advisory-for-Post-Authentication-CommaVendor Advisory
FAQ
What is CVE-2020-35792?
CVE-2020-35792 is a vulnerability with a CVSS score of 8.3 (HIGH). Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68.
How severe is CVE-2020-35792?
CVE-2020-35792 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-35792?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear R7500 Firmware, Netgear R7500, Netgear R8900 Firmware, Netgear R8900, Netgear R9000 Firmware.