CVE-2020-11789: Command Injection
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700v3 before 1.0.4.84, R6900 before 1.0.2.8, and R7900 before 1.0.3.10.
Affected Software
Event History
Frequently Asked Questions
What vulnerability does CVE-2020-11789 refer to?
CVE-2020-11789 refers to a command injection vulnerability affecting certain NETGEAR devices that can be exploited by unauthenticated attackers.
What is the severity classification of CVE-2020-11789?
CVE-2020-11789 is classified as a high severity vulnerability due to its potential for exploitation without authentication.
How do I fix CVE-2020-11789?
To fix CVE-2020-11789, update your NETGEAR device firmware to the latest version: R6400v2 to at least 1.0.4.84, R6700 to at least 1.0.2.8, R6900 to at least 1.0.2.8, or R7900 to at least 1.0.3.10.
Which NETGEAR devices are affected by CVE-2020-11789?
CVE-2020-11789 affects NETGEAR devices including R6400v2, R6700, R6700v3, R6900, and R7900, all prior to specified firmware versions.
Is there a workaround for CVE-2020-11789?
No formal workaround is provided for CVE-2020-11789; the recommended solution is to update the firmware of affected devices.