CVE-2019-20702

—

CVSS 3.1

8.0 high

EPSS

<1%p54

Published

Apr 16, 2020 (Apr 16, 2020)

Modified

Jun 17, 2026

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.

Vendors: netgear
Products: xr500 firmware, d3600 firmware, d6000 firmware
Weakness: CWE-77
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.