CVEDB API

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.10.2 and WAC510 before 5.0.10.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 50.5%

CVSS Severity

CVSS v3 Score 6.4

CVSS v2 Score 5.2

References

Products affected by CVE-2019-20745

Netgear » Wac505 » Version: N/A

cpe:2.3:h:netgear:wac505:-
Netgear » Wac510 » Version: N/A

cpe:2.3:h:netgear:wac510:-
Netgear » Wac505 Firmware » Version: N/A

cpe:2.3:o:netgear:wac505_firmware:-
Netgear » Wac505 Firmware » Version: 5.0.0.17

cpe:2.3:o:netgear:wac505_firmware:5.0.0.17
Netgear » Wac505 Firmware » Version: 5.0.5.4

cpe:2.3:o:netgear:wac505_firmware:5.0.5.4
Netgear » Wac510 Firmware » Version: 1.3.0.10

cpe:2.3:o:netgear:wac510_firmware:1.3.0.10
Netgear » Wac510 Firmware » Version: 5.0.0.17

cpe:2.3:o:netgear:wac510_firmware:5.0.0.17
Netgear » Wac510 Firmware » Version: 5.0.5.4

cpe:2.3:o:netgear:wac510_firmware:5.0.5.4