CVE-2020-26922

published 2020-10-09

CVE-2020-26922: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
netgear	wc7500_firmware	< 6.5.5.24	6.5.5.24
netgear	wc7600_firmware	< 6.5.5.24	6.5.5.24
netgear	wc7600v2_firmware	< 6.5.5.24	6.5.5.24
netgear	wc9500_firmware	< 6.5.5.24	6.5.5.24

CWE-77