CVE-2019-20701: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20701?
CVE-2019-20701 is classified as a high severity vulnerability due to the potential for command injection by authenticated users.
How do I fix CVE-2019-20701?
To mitigate CVE-2019-20701, upgrade your device firmware to versions 1.0.0.76 for the D3600 and D6000, and 2.3.2.32 for the XR500.
Which NETGEAR devices are affected by CVE-2019-20701?
CVE-2019-20701 affects the NETGEAR D3600, D6000, and XR500 models running vulnerable firmware versions.
What type of vulnerability is CVE-2019-20701?
CVE-2019-20701 is a command injection vulnerability that can be exploited by an authenticated user.
Is there a way to check if my device is vulnerable to CVE-2019-20701?
You can check your device's firmware version against the known vulnerable versions for D3600, D6000, and XR500 to determine if it is affected.