NetSight
medium6.8

CVE-2020-14433

Certain NETGEAR devices are affected by command injection by an authenticated user.

Impact

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBK842 before 3.2.15.25, RBR850 before 3.2.15.25, RBS850 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, and RBS750 before 3.2.15.25.

Affected products

VendorProductAffected versions
NetgearRbk852 Firmware
before 3.2.15.25
NetgearRbk853 Firmware
before 3.2.15.25
NetgearRbk842 Firmware
before 3.2.15.25
NetgearRbr850 Firmware
before 3.2.15.25
NetgearRbs850 Firmware
before 3.2.15.25
NetgearRbr840 Firmware
before 3.2.15.25
NetgearRbs840 Firmware
before 3.2.15.25
NetgearRbk752 Firmware
before 3.2.15.25
NetgearRbk753 Firmware
before 3.2.15.25
NetgearRbk753s Firmware
before 3.2.15.25
NetgearRbr750 Firmware
before 3.2.15.25
NetgearRbs750 Firmware
before 3.2.15.25

Weakness classification

References