CVE-2019-20708: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20708?
CVE-2019-20708 is classified as a medium severity vulnerability due to the potential for command injection by authenticated users.
How can I remediate CVE-2019-20708?
To fix CVE-2019-20708, users should update their firmware to the latest versions: D3600 to 1.0.0.76, D6000 to 1.0.0.76, and XR500 to 2.3.2.32.
Which NETGEAR devices are impacted by CVE-2019-20708?
CVE-2019-20708 affects the NETGEAR D3600 versions before 1.0.0.76, D6000 versions before 1.0.0.76, and XR500 versions before 2.3.2.32.
What kind of attack does CVE-2019-20708 enable?
CVE-2019-20708 allows authenticated users to execute command injection attacks on vulnerable NETGEAR devices.
Is CVE-2019-20708 currently being exploited?
There is no public information indicating that CVE-2019-20708 is actively being exploited in the wild.