CVE-2020-14435: Command Injection
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14435?
CVE-2020-14435 is classified as a high-severity vulnerability due to potential command injection by unauthenticated attackers.
How do I fix CVE-2020-14435?
To fix CVE-2020-14435, upgrade your NETGEAR devices to firmware version 2.5.2.104 or later.
Which NETGEAR devices are affected by CVE-2020-14435?
CVE-2020-14435 affects NETGEAR SRK60, SRS60, SRR60, SRK60B03, SRK60B04, SRK60B05, and SRK60B06 devices running firmware versions below 2.5.2.104.
Can CVE-2020-14435 be exploited remotely?
Yes, CVE-2020-14435 can be exploited remotely by unauthenticated attackers through command injection.
What kind of attack can CVE-2020-14435 enable?
CVE-2020-14435 could enable attackers to execute arbitrary commands on the affected NETGEAR devices.