Vulnerability Details CVE-2020-26922
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.0%
CVSS Severity
CVSS v3 Score 6.4
CVSS v2 Score 4.6
References
Products affected by CVE-2020-26922
-
cpe:2.3:h:netgear:wc7500:-
-
cpe:2.3:h:netgear:wc7600:-
-
cpe:2.3:h:netgear:wc7600v2:-
-
cpe:2.3:h:netgear:wc9500:-
-
cpe:2.3:o:netgear:wc7500_firmware:6.5.3.5
-
cpe:2.3:o:netgear:wc7500_firmware:6.5.3.9
-
cpe:2.3:o:netgear:wc7600_firmware:6.5.3.9
-
cpe:2.3:o:netgear:wc7600v2_firmware:6.5.3.5
-
cpe:2.3:o:netgear:wc9500_firmware:6.5.3.5