Lucene search

MitreCVE-2020-14435

HistoryJun 18, 2020 - 5:15 p.m.

CVE-2020-14435

2020-06-1817:15:12

CWE-77

mitre

web.nvd.nist.gov

netgear

command injection

vulnerability

cve-2020-14435

nvd

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

33.5%

JSON

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104.

Affected configurations

Nvd

Node

netgearsrk60_firmwareRange<2.5.2.104

AND

netgearsrk60Match-

Node

netgearsrs60_firmwareRange<2.5.2.104

AND

netgearsrs60Match-

Node

netgearsrr60_firmwareRange<2.5.2.104

AND

netgearsrr60Match-

Node

netgearsrk60b03_firmwareRange<2.5.2.104

AND

netgearsrk60b03Match-

Node

netgearsrk60b04_firmwareRange<2.5.2.104

AND

netgearsrk60b04Match-

Node

netgearsrk60b05_firmwareRange<2.5.2.104

AND

netgearsrk60b05Match-

Node

netgearsrk60b06_firmwareRange<2.5.2.104

AND

netgearsrk60b06Match-

VendorProductVersionCPE
netgearsrk60_firmware*cpe:2.3:o:netgear:srk60_firmware:*:*:*:*:*:*:*:*
netgearsrk60-cpe:2.3:h:netgear:srk60:-:*:*:*:*:*:*:*
netgearsrs60_firmware*cpe:2.3:o:netgear:srs60_firmware:*:*:*:*:*:*:*:*
netgearsrs60-cpe:2.3:h:netgear:srs60:-:*:*:*:*:*:*:*
netgearsrr60_firmware*cpe:2.3:o:netgear:srr60_firmware:*:*:*:*:*:*:*:*
netgearsrr60-cpe:2.3:h:netgear:srr60:-:*:*:*:*:*:*:*
netgearsrk60b03_firmware*cpe:2.3:o:netgear:srk60b03_firmware:*:*:*:*:*:*:*:*
netgearsrk60b03-cpe:2.3:h:netgear:srk60b03:-:*:*:*:*:*:*:*
netgearsrk60b04_firmware*cpe:2.3:o:netgear:srk60b04_firmware:*:*:*:*:*:*:*:*
netgearsrk60b04-cpe:2.3:h:netgear:srk60b04:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	srk60_firmware	*	cpe:2.3:o:netgear:srk60_firmware::::::::
netgear	srk60	-	cpe:2.3:h:netgear:srk60:-:::::::*
netgear	srs60_firmware	*	cpe:2.3:o:netgear:srs60_firmware::::::::
netgear	srs60	-	cpe:2.3:h:netgear:srs60:-:::::::*
netgear	srr60_firmware	*	cpe:2.3:o:netgear:srr60_firmware::::::::
netgear	srr60	-	cpe:2.3:h:netgear:srr60:-:::::::*
netgear	srk60b03_firmware	*	cpe:2.3:o:netgear:srk60b03_firmware::::::::
netgear	srk60b03	-	cpe:2.3:h:netgear:srk60b03:-:::::::*
netgear	srk60b04_firmware	*	cpe:2.3:o:netgear:srk60b04_firmware::::::::
netgear	srk60b04	-	cpe:2.3:h:netgear:srk60b04:-:::::::*

Rows per page:

1-10 of 141

References

kb.netgear.com/000061930/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0026

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

33.5%

JSON

Related for CVE-2020-14435