CVE-2019-20702: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20702?
CVE-2019-20702 has been classified as a medium severity vulnerability.
How do I fix CVE-2019-20702?
To fix CVE-2019-20702, upgrade the firmware of affected NETGEAR devices to the latest version, specifically D3600 to 1.0.0.76 or later, D6000 to 1.0.0.76 or later, and XR500 to 2.3.2.32 or later.
Which NETGEAR devices are affected by CVE-2019-20702?
CVE-2019-20702 affects NETGEAR D3600, D6000, and XR500 devices running specific firmware versions prior to the recommended updates.
What type of vulnerability is CVE-2019-20702?
CVE-2019-20702 is a command injection vulnerability that can be exploited by an authenticated user.
Can I still use my NETGEAR device if it is vulnerable to CVE-2019-20702?
Using a vulnerable NETGEAR device poses security risks, so it is recommended to update to the latest firmware as soon as possible.