NetSight
high8.4

CVE-2020-26910

Certain NETGEAR devices are affected by command injection by an authenticated user.

Impact

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Affected products

VendorProductAffected versions
NetgearCbr40 Firmware
before 2.5.0.10
NetgearRbk752 Firmware
before 3.2.15.25
NetgearRbr750 Firmware
before 3.2.15.25
NetgearRbs750 Firmware
before 3.2.15.25
NetgearRbk852 Firmware
before 3.2.15.25
NetgearRbr850 Firmware
before 3.2.15.25
NetgearRbs850 Firmware
before 3.2.15.25

Weakness classification

References