CVE-2020-11789

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700v3 before 1.0.4.84, R6900 before 1.0.2.8, and R7900 before 1.0.3.10.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published: Apr 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-11796.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker w CVE-2020-117909.8NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers.CVE-2020-117916.1NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS.CVE-2020-117927.5NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key dis CVE-2020-117938.8A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers t CVE-2020-117957.5In JetBrains Space through 2020-04-22, the session timeout period was configured improperly.CVE-2020-117969.8In JetBrains Space through 2020-04-22, the password authentication implementation was insecure.CVE-2020-117977.5An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x CVE-2020-117985.3A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an CVE-2020-117999.8Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This can also affect all us CVE-2020-11804.2<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability CVE-2020-118009.8Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.