ZeroHour

CVE-2020-14442

CVSS 3.1
8.8 high
EPSS
2%p78
Published
()
Modified
Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Vendors
netgear
Products
rbk752 firmware, rbk753 firmware, rbk753s firmware, rbr750 firmware, rbs750 firmware, rbk842 firmware, rbr840 firmware, rbs840 firmware, rbk852 firmware, rbk853 firmware, rbr850 firmware, rbs850 firmware
Weakness
CWE-77
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.