CVE-2020-11789
9.8
CRITICAL · CVSS 3.1 · EPSS 2.7% (pctl 85)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700v3 before 1.0.4.84, R6900 before 1.0.2.8, and R7900 before 1.0.3.10.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.67% — more likely to be exploited than 85% of all CVEs |
| Weakness | CWE-77 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2020-04-15 |
| Last modified | 2026-06-17 |
Affected (8)
| Vendor | Product |
|---|---|
| netgear | r6400 |
| netgear | r6400 firmware |
| netgear | r6700 |
| netgear | r6700 firmware |
| netgear | r6900 |
| netgear | r6900 firmware |
| netgear | r7900 |
| netgear | r7900 firmware |
References
→ the Explorer · watch your stack · NVD