CVE-2019-20705: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20705?
CVE-2019-20705 has a high severity rating due to command injection vulnerabilities that allow authenticated users to execute arbitrary commands.
How do I fix CVE-2019-20705?
To fix CVE-2019-20705, update NETGEAR D3600 and D6000 firmware to version 1.0.0.76 or XR500 firmware to version 2.3.2.32 or newer.
Which NETGEAR devices are affected by CVE-2019-20705?
CVE-2019-20705 affects NETGEAR D3600, D6000, and XR500 devices with specific firmware versions prior to their respective updates.
Can an unauthenticated user exploit CVE-2019-20705?
No, CVE-2019-20705 requires authentication, meaning only authenticated users can exploit the command injection vulnerability.
What are the potential impacts of CVE-2019-20705?
The potential impacts of CVE-2019-20705 include unauthorized command execution, which could compromise the affected NETGEAR devices.