high8.8
CVE-2021-20173
Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device.
Impact
Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check via the SOAP interface, the device is susceptible to command injection via preconfigured values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | R6700 Firmware | Version 1.0.4.120 |