CVE-2020-26920: Command Injection
Published Oct 9, 2020
·Updated
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110.
Affected Software
6 affected components
Netgear Srk60 Firmware<2.5.3.110
Netgear SRK60
Netgear Srr60 Firmware<2.5.3.110
Netgear SRR60
Netgear Srs60 Firmware<2.5.3.110
Netgear SRS60
Event History
Oct 9, 2020
CVE Published
via MITRE·06:28 AM
Data Sourced
via MITRE·06:28 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2020-26920?
CVE-2020-26920 is classified as a high severity vulnerability due to the potential for unauthorized command execution.
2
How do I fix CVE-2020-26920?
To mitigate CVE-2020-26920, update affected devices to firmware version 2.5.3.110 or later.
3
Which NETGEAR devices are affected by CVE-2020-26920?
CVE-2020-26920 affects NETGEAR SRK60, SRR60, and SRS60 devices running firmware versions prior to 2.5.3.110.
4
Can an attacker exploit CVE-2020-26920 without authentication?
Yes, CVE-2020-26920 can be exploited by an unauthenticated attacker.
5
What type of vulnerability is CVE-2020-26920?
CVE-2020-26920 is a command injection vulnerability.