CVE-2020-14435: Command Injection
First published: Thu Jun 18 2020(Updated: )
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NETGEAR SRK60 | <2.5.2.104 | |
| NETGEAR SRK60 firmware | ||
| NETGEAR SRS60 firmware | <2.5.2.104 | |
| NETGEAR SRS60 firmware | ||
| NETGEAR SRR60 Firmware | <2.5.2.104 | |
| NETGEAR SRR60 Firmware | ||
| NETGEAR SRK60 firmware | <2.5.2.104 | |
| NETGEAR SRK60 | ||
| NETGEAR SRK60 firmware | <2.5.2.104 | |
| NETGEAR SRK60 | ||
| NETGEAR SRK60 firmware | <2.5.2.104 | |
| NETGEAR SRK60 | ||
| NETGEAR SRK60 firmware | <2.5.2.104 | |
| NETGEAR SRK60 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-14435?
CVE-2020-14435 is classified as a high-severity vulnerability due to potential command injection by unauthenticated attackers.
How do I fix CVE-2020-14435?
To fix CVE-2020-14435, upgrade your NETGEAR devices to firmware version 2.5.2.104 or later.
Which NETGEAR devices are affected by CVE-2020-14435?
CVE-2020-14435 affects NETGEAR SRK60, SRS60, SRR60, SRK60B03, SRK60B04, SRK60B05, and SRK60B06 devices running firmware versions below 2.5.2.104.
Can CVE-2020-14435 be exploited remotely?
Yes, CVE-2020-14435 can be exploited remotely by unauthenticated attackers through command injection.
What kind of attack can CVE-2020-14435 enable?
CVE-2020-14435 could enable attackers to execute arbitrary commands on the affected NETGEAR devices.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/netgear
- canonical/netgear srk60
- canonical/netgear srk60 firmware
- canonical/netgear srs60 firmware
- canonical/netgear srr60 firmware