CVE-2020-35785

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Dec 30, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-357864.5NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user.CVE-2020-357878.0Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.7CVE-2020-357886.8NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user.CVE-2020-357898.8NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user.CVE-2020-35796.1A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to coCVE-2020-357906.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.6CVE-2020-357916.7Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2CVE-2020-357926.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5CVE-2020-357936.7Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58, R7500v2 before 1.0.3CVE-2020-357946.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS40V before 2.6.1.4, RBK752 before 3.2.15CVE-2020-357959.8Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 beforeCVE-2020-357969.8Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1
CVE-2020-35785: High severity, CVSS 8.8 | Vulnix