CVE-2019-20655
published 2020-04-15CVE-2019-20655: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR500 before 2.3.2.56 and XR700 before 1.0.1.20.
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR500 before 2.3.2.56 and XR700 before 1.0.1.20.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| netgear | xr500_firmware | < 2.3.2.56 | 2.3.2.56 |
| netgear | xr700_firmware | < 1.0.1.20 | 1.0.1.20 |