CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-15634

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers with firmware 1.0.4.84_10.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to execute code in the context of the web server. Was ZDI-CAN-9755.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 56.2%

CVSS Severity

CVSS v3 Score 6.3

CVSS v2 Score 5.8

References

Products affected by CVE-2020-15634

Netgear » R6700 » Version: v3

cpe:2.3:h:netgear:r6700:v3
Netgear » R6700 Firmware » Version: N/A

cpe:2.3:o:netgear:r6700_firmware:-
Netgear » R6700 Firmware » Version: 1.0.0.26

cpe:2.3:o:netgear:r6700_firmware:1.0.0.26
Netgear » R6700 Firmware » Version: 1.0.1.14

cpe:2.3:o:netgear:r6700_firmware:1.0.1.14
Netgear » R6700 Firmware » Version: 1.0.1.16

cpe:2.3:o:netgear:r6700_firmware:1.0.1.16
Netgear » R6700 Firmware » Version: 1.0.1.20

cpe:2.3:o:netgear:r6700_firmware:1.0.1.20
Netgear » R6700 Firmware » Version: 1.0.1.22

cpe:2.3:o:netgear:r6700_firmware:1.0.1.22
Netgear » R6700 Firmware » Version: 1.0.1.26

cpe:2.3:o:netgear:r6700_firmware:1.0.1.26
Netgear » R6700 Firmware » Version: 1.0.1.30

cpe:2.3:o:netgear:r6700_firmware:1.0.1.30
Netgear » R6700 Firmware » Version: 1.0.1.36

cpe:2.3:o:netgear:r6700_firmware:1.0.1.36
Netgear » R6700 Firmware » Version: 1.0.1.44

cpe:2.3:o:netgear:r6700_firmware:1.0.1.44
Netgear » R6700 Firmware » Version: 1.0.1.46

cpe:2.3:o:netgear:r6700_firmware:1.0.1.46
Netgear » R6700 Firmware » Version: 1.0.1.48

cpe:2.3:o:netgear:r6700_firmware:1.0.1.48
Netgear » R6700 Firmware » Version: 1.0.2.16

cpe:2.3:o:netgear:r6700_firmware:1.0.2.16
Netgear » R6700 Firmware » Version: 1.0.2.26

cpe:2.3:o:netgear:r6700_firmware:1.0.2.26
Netgear » R6700 Firmware » Version: 1.0.2.32

cpe:2.3:o:netgear:r6700_firmware:1.0.2.32
Netgear » R6700 Firmware » Version: 1.0.2.52

cpe:2.3:o:netgear:r6700_firmware:1.0.2.52
Netgear » R6700 Firmware » Version: 1.0.2.6

cpe:2.3:o:netgear:r6700_firmware:1.0.2.6
Netgear » R6700 Firmware » Version: 1.0.2.62

cpe:2.3:o:netgear:r6700_firmware:1.0.2.62
Netgear » R6700 Firmware » Version: 1.0.2.66

cpe:2.3:o:netgear:r6700_firmware:1.0.2.66
Netgear » R6700 Firmware » Version: 1.0.2.8

cpe:2.3:o:netgear:r6700_firmware:1.0.2.8
Netgear » R6700 Firmware » Version: 1.0.4.84

cpe:2.3:o:netgear:r6700_firmware:1.0.4.84
Netgear » R6700 Firmware » Version: 1.0.4.84_10.0.58

cpe:2.3:o:netgear:r6700_firmware:1.0.4.84_10.0.58

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-15634

Products

Pricing

Contact Us