CVE-2020-35791: Command Injection
Published Dec 29, 2020
·Updated
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before 1.0.5.2.
Affected Software
6 affected components
Netgear R7800 firmware<1.0.2.68
Netgear R7800
Netgear R8900 Firmware<1.0.5.2
Netgear R8900
Netgear R9000 Firmware<1.0.5.2
Netgear R9000
Event History
Dec 29, 2020
CVE Published
via MITRE·11:39 PM
Data Sourced
via MITRE·11:39 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2020-35791?
CVE-2020-35791 is classified as a medium severity vulnerability affecting certain NETGEAR devices.
2
How do I fix CVE-2020-35791?
To fix CVE-2020-35791, update the firmware to version 1.0.2.68 or later for R7800, and 1.0.5.2 or later for R8900 and R9000.
3
Which NETGEAR devices are affected by CVE-2020-35791?
CVE-2020-35791 affects NETGEAR R7800 before version 1.0.2.68, R8900 before version 1.0.5.2, and R9000 before version 1.0.5.2.
4
What type of vulnerability is CVE-2020-35791?
CVE-2020-35791 is a command injection vulnerability that can be exploited by an authenticated user.
5
Is authentication required to exploit CVE-2020-35791?
Yes, exploitation of CVE-2020-35791 requires the attacker to be an authenticated user on the affected NETGEAR devices.