CVE-2019-20709: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20709?
CVE-2019-20709 has a high severity rating due to its potential for command injection attacks by authenticated users.
Which NETGEAR devices are affected by CVE-2019-20709?
CVE-2019-20709 affects NETGEAR D3600 before version 1.0.0.76, D6000 before version 1.0.0.76, and XR500 before version 2.3.2.32.
How do I fix CVE-2019-20709?
To fix CVE-2019-20709, update the affected NETGEAR devices to the latest firmware versions mentioned in the advisory.
Is CVE-2019-20709 a serious threat to NETGEAR users?
Yes, CVE-2019-20709 poses a serious threat as it allows authenticated users to execute arbitrary commands on the devices.
What are the consequences of exploiting CVE-2019-20709?
Exploiting CVE-2019-20709 could lead to unauthorized access and control over the compromised NETGEAR devices.