CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-27861

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.0%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 8.3

References

Products affected by CVE-2020-27861

Netgear » Cbk40 » Version: N/A

cpe:2.3:h:netgear:cbk40:-
Netgear » Cbk43 » Version: N/A

cpe:2.3:h:netgear:cbk43:-
Netgear » Cbr40 » Version: N/A

cpe:2.3:h:netgear:cbr40:-
Netgear » Ex6200 » Version: v2

cpe:2.3:h:netgear:ex6200:v2
Netgear » Ex7700 » Version: N/A

cpe:2.3:h:netgear:ex7700:-
Netgear » Ex8000 » Version: N/A

cpe:2.3:h:netgear:ex8000:-
Netgear » Rbk12 » Version: N/A

cpe:2.3:h:netgear:rbk12:-
Netgear » Rbk13 » Version: N/A

cpe:2.3:h:netgear:rbk13:-
Netgear » Rbk14 » Version: N/A

cpe:2.3:h:netgear:rbk14:-
Netgear » Rbk15 » Version: N/A

cpe:2.3:h:netgear:rbk15:-
Netgear » Rbk20 » Version: N/A

cpe:2.3:h:netgear:rbk20:-
Netgear » Rbk20w » Version: N/A

cpe:2.3:h:netgear:rbk20w:-
Netgear » Rbk22 » Version: N/A

cpe:2.3:h:netgear:rbk22:-
Netgear » Rbk23 » Version: N/A

cpe:2.3:h:netgear:rbk23:-
Netgear » Rbk23w » Version: N/A

cpe:2.3:h:netgear:rbk23w:-
Netgear » Rbk30 » Version: N/A

cpe:2.3:h:netgear:rbk30:-
Netgear » Rbk33 » Version: N/A

cpe:2.3:h:netgear:rbk33:-
Netgear » Rbk40 » Version: N/A

cpe:2.3:h:netgear:rbk40:-
Netgear » Rbk43 » Version: N/A

cpe:2.3:h:netgear:rbk43:-
Netgear » Rbk43s » Version: N/A

cpe:2.3:h:netgear:rbk43s:-
Netgear » Rbk44 » Version: N/A

cpe:2.3:h:netgear:rbk44:-
Netgear » Rbk50 » Version: N/A

cpe:2.3:h:netgear:rbk50:-
Netgear » Rbk50v » Version: N/A

cpe:2.3:h:netgear:rbk50v:-
Netgear » Rbk52w » Version: N/A

cpe:2.3:h:netgear:rbk52w:-
Netgear » Rbr10 » Version: N/A

cpe:2.3:h:netgear:rbr10:-
Netgear » Rbr20 » Version: N/A

cpe:2.3:h:netgear:rbr20:-
Netgear » Rbr40 » Version: N/A

cpe:2.3:h:netgear:rbr40:-
Netgear » Rbr50 » Version: N/A

cpe:2.3:h:netgear:rbr50:-
Netgear » Rbs10 » Version: N/A

cpe:2.3:h:netgear:rbs10:-
Netgear » Rbs20 » Version: N/A

cpe:2.3:h:netgear:rbs20:-
Netgear » Rbs40 » Version: N/A

cpe:2.3:h:netgear:rbs40:-
Netgear » Rbs50 » Version: N/A

cpe:2.3:h:netgear:rbs50:-
Netgear » Cbk40 Firmware » Version: 2.5.0.10

cpe:2.3:o:netgear:cbk40_firmware:2.5.0.10
Netgear » Cbk43 Firmware » Version: Any

cpe:2.3:o:netgear:cbk43_firmware:*
Netgear » Cbr40 Firmware » Version: N/A

cpe:2.3:o:netgear:cbr40_firmware:-
Netgear » Cbr40 Firmware » Version: 2.3.5.12

cpe:2.3:o:netgear:cbr40_firmware:2.3.5.12
Netgear » Cbr40 Firmware » Version: 2.5.0.10

cpe:2.3:o:netgear:cbr40_firmware:2.5.0.10
Netgear » Cbr40 Firmware » Version: 2.5.0.14

cpe:2.3:o:netgear:cbr40_firmware:2.5.0.14
Netgear » Cbr40 Firmware » Version: 2.5.0.24

cpe:2.3:o:netgear:cbr40_firmware:2.5.0.24
Netgear » Cbr40 Firmware » Version: 2.5.0.28

cpe:2.3:o:netgear:cbr40_firmware:2.5.0.28
Netgear » Ex6200 Firmware » Version: 1.0.1.44

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.44
Netgear » Ex6200 Firmware » Version: 1.0.1.50

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.50
Netgear » Ex6200 Firmware » Version: 1.0.1.52

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.52
Netgear » Ex6200 Firmware » Version: 1.0.1.56

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.56
Netgear » Ex6200 Firmware » Version: 1.0.1.62

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.62
Netgear » Ex6200 Firmware » Version: 1.0.1.64

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.64
Netgear » Ex6200 Firmware » Version: 1.0.1.72

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.72
Netgear » Ex6200 Firmware » Version: 1.0.1.74

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.74
Netgear » Ex6200 Firmware » Version: 1.0.1.78

cpe:2.3:o:netgear:ex6200_firmware:1.0.1.78
Netgear » Ex7700 Firmware » Version: N/A

cpe:2.3:o:netgear:ex7700_firmware:-
Netgear » Ex8000 Firmware » Version: N/A

cpe:2.3:o:netgear:ex8000_firmware:-
Netgear » Ex8000 Firmware » Version: 1.0.0.102

cpe:2.3:o:netgear:ex8000_firmware:1.0.0.102
Netgear » Ex8000 Firmware » Version: 1.0.0.114

cpe:2.3:o:netgear:ex8000_firmware:1.0.0.114
Netgear » Ex8000 Firmware » Version: 1.0.0.118

cpe:2.3:o:netgear:ex8000_firmware:1.0.0.118
Netgear » Ex8000 Firmware » Version: 1.0.1.180

cpe:2.3:o:netgear:ex8000_firmware:1.0.1.180
Netgear » Ex8000 Firmware » Version: 1.0.1.186

cpe:2.3:o:netgear:ex8000_firmware:1.0.1.186
Netgear » Rbk12 Firmware » Version: N/A

cpe:2.3:o:netgear:rbk12_firmware:-
Netgear » Rbk13 Firmware » Version: Any

cpe:2.3:o:netgear:rbk13_firmware:*
Netgear » Rbk14 Firmware » Version: Any

cpe:2.3:o:netgear:rbk14_firmware:*
Netgear » Rbk15 Firmware » Version: Any

cpe:2.3:o:netgear:rbk15_firmware:*
Netgear » Rbk20 Router Firmware » Version: Any

cpe:2.3:o:netgear:rbk20_router_firmware:*
Netgear » Rbk20 Satellite Firmware » Version: Any

cpe:2.3:o:netgear:rbk20_satellite_firmware:*
Netgear » Rbk20w Firmware » Version: Any

cpe:2.3:o:netgear:rbk20w_firmware:*
Netgear » Rbk22 Router Firmware » Version: Any

cpe:2.3:o:netgear:rbk22_router_firmware:*
Netgear » Rbk22 Satellite Firmware » Version: Any

cpe:2.3:o:netgear:rbk22_satellite_firmware:*
Netgear » Rbk23 Router Firmware » Version: Any

cpe:2.3:o:netgear:rbk23_router_firmware:*
Netgear » Rbk23 Satellite Firmware » Version: Any

cpe:2.3:o:netgear:rbk23_satellite_firmware:*
Netgear » Rbk23w Firmware » Version: Any

cpe:2.3:o:netgear:rbk23w_firmware:*
Netgear » Rbk30 Firmware » Version: Any

cpe:2.3:o:netgear:rbk30_firmware:*
Netgear » Rbk33 Firmware » Version: Any

cpe:2.3:o:netgear:rbk33_firmware:*
Netgear » Rbk40 Router Firmware » Version: Any

cpe:2.3:o:netgear:rbk40_router_firmware:*
Netgear » Rbk40 Satellite Firmware » Version: Any

cpe:2.3:o:netgear:rbk40_satellite_firmware:*
Netgear » Rbk43 Router Firmware » Version: Any

cpe:2.3:o:netgear:rbk43_router_firmware:*
Netgear » Rbk43 Satellite Firmware » Version: Any

cpe:2.3:o:netgear:rbk43_satellite_firmware:*
Netgear » Rbk43s Router Firmware » Version: Any

cpe:2.3:o:netgear:rbk43s_router_firmware:*
Netgear » Rbk43s Satellite Firmware » Version: Any

cpe:2.3:o:netgear:rbk43s_satellite_firmware:*
Netgear » Rbk44 Router Firmware » Version: Any

cpe:2.3:o:netgear:rbk44_router_firmware:*
Netgear » Rbk44 Satellite Firmware » Version: Any

cpe:2.3:o:netgear:rbk44_satellite_firmware:*
Netgear » Rbk50 Firmware » Version: N/A

cpe:2.3:o:netgear:rbk50_firmware:-
Netgear » Rbk50 Firmware » Version: 2.1.4.10

cpe:2.3:o:netgear:rbk50_firmware:2.1.4.10
Netgear » Rbk50 Firmware » Version: 2.3.0.22

cpe:2.3:o:netgear:rbk50_firmware:2.3.0.22
Netgear » Rbk50 Firmware » Version: 2.3.0.32

cpe:2.3:o:netgear:rbk50_firmware:2.3.0.32
Netgear » Rbk50 Firmware » Version: 2.3.5.30

cpe:2.3:o:netgear:rbk50_firmware:2.3.5.30
Netgear » Rbk50 Firmware » Version: 2.5.1.16

cpe:2.3:o:netgear:rbk50_firmware:2.5.1.16
Netgear » Rbk50v Firmware » Version: Any

cpe:2.3:o:netgear:rbk50v_firmware:*
Netgear » Rbk52w Firmware » Version: Any

cpe:2.3:o:netgear:rbk52w_firmware:*
Netgear » Rbr10 Firmware » Version: Any

cpe:2.3:o:netgear:rbr10_firmware:*
Netgear » Rbr20 Firmware » Version: N/A

cpe:2.3:o:netgear:rbr20_firmware:-
Netgear » Rbr20 Firmware » Version: 2.3.0.22

cpe:2.3:o:netgear:rbr20_firmware:2.3.0.22
Netgear » Rbr20 Firmware » Version: 2.3.0.28

cpe:2.3:o:netgear:rbr20_firmware:2.3.0.28
Netgear » Rbr20 Firmware » Version: 2.3.5.26

cpe:2.3:o:netgear:rbr20_firmware:2.3.5.26
Netgear » Rbr20 Firmware » Version: 2.5.1.16

cpe:2.3:o:netgear:rbr20_firmware:2.5.1.16
Netgear » Rbr40 Firmware » Version: N/A

cpe:2.3:o:netgear:rbr40_firmware:-
Netgear » Rbr40 Firmware » Version: 2.3.0.28

cpe:2.3:o:netgear:rbr40_firmware:2.3.0.28
Netgear » Rbr40 Firmware » Version: 2.3.5.30

cpe:2.3:o:netgear:rbr40_firmware:2.3.5.30
Netgear » Rbr40 Firmware » Version: 2.5.1.16

cpe:2.3:o:netgear:rbr40_firmware:2.5.1.16
Netgear » Rbr50 Firmware » Version: N/A

cpe:2.3:o:netgear:rbr50_firmware:-
Netgear » Rbr50 Firmware » Version: 2.3.0.22

cpe:2.3:o:netgear:rbr50_firmware:2.3.0.22
Netgear » Rbr50 Firmware » Version: 2.3.0.32

cpe:2.3:o:netgear:rbr50_firmware:2.3.0.32
Netgear » Rbr50 Firmware » Version: 2.3.5.30

cpe:2.3:o:netgear:rbr50_firmware:2.3.5.30
Netgear » Rbr50 Firmware » Version: 2.5.1.16

cpe:2.3:o:netgear:rbr50_firmware:2.5.1.16
Netgear » Rbs10 Firmware » Version: Any

cpe:2.3:o:netgear:rbs10_firmware:*
Netgear » Rbs20 Firmware » Version: N/A

cpe:2.3:o:netgear:rbs20_firmware:-
Netgear » Rbs20 Firmware » Version: 2.3.0.22

cpe:2.3:o:netgear:rbs20_firmware:2.3.0.22
Netgear » Rbs20 Firmware » Version: 2.3.0.28

cpe:2.3:o:netgear:rbs20_firmware:2.3.0.28
Netgear » Rbs20 Firmware » Version: 2.3.5.26

cpe:2.3:o:netgear:rbs20_firmware:2.3.5.26
Netgear » Rbs20 Firmware » Version: 2.5.1.16

cpe:2.3:o:netgear:rbs20_firmware:2.5.1.16
Netgear » Rbs40 Firmware » Version: N/A

cpe:2.3:o:netgear:rbs40_firmware:-
Netgear » Rbs40 Firmware » Version: 2.1.4.10

cpe:2.3:o:netgear:rbs40_firmware:2.1.4.10
Netgear » Rbs40 Firmware » Version: 2.3.0.22

cpe:2.3:o:netgear:rbs40_firmware:2.3.0.22
Netgear » Rbs40 Firmware » Version: 2.3.0.28

cpe:2.3:o:netgear:rbs40_firmware:2.3.0.28
Netgear » Rbs40 Firmware » Version: 2.3.5.30

cpe:2.3:o:netgear:rbs40_firmware:2.3.5.30
Netgear » Rbs40 Firmware » Version: 2.5.1.16

cpe:2.3:o:netgear:rbs40_firmware:2.5.1.16
Netgear » Rbs50 Firmware » Version: N/A

cpe:2.3:o:netgear:rbs50_firmware:-
Netgear » Rbs50 Firmware » Version: 2.1.4.10

cpe:2.3:o:netgear:rbs50_firmware:2.1.4.10
Netgear » Rbs50 Firmware » Version: 2.3.0.22

cpe:2.3:o:netgear:rbs50_firmware:2.3.0.22
Netgear » Rbs50 Firmware » Version: 2.3.0.32

cpe:2.3:o:netgear:rbs50_firmware:2.3.0.32
Netgear » Rbs50 Firmware » Version: 2.3.5.30

cpe:2.3:o:netgear:rbs50_firmware:2.3.5.30
Netgear » Rbs50 Firmware » Version: 2.5.1.16

cpe:2.3:o:netgear:rbs50_firmware:2.5.1.16

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-27861

Products

Pricing

Contact Us