CVE-2020-14434
Summary
| CVE | CVE-2020-14434 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-06-18 17:15:00 UTC |
| Updated | 2021-07-21 11:39:00 UTC |
| Description | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, RBS850 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, and RBS840 before 3.2.15.25. |
Risk And Classification
Problem Types: CWE-77
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | Rbk752 | - | All | All | All |
| Hardware | Netgear | Rbk752 | - | All | All | All |
| Operating System | Netgear | Rbk752 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk752 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk753 | - | All | All | All |
| Hardware | Netgear | Rbk753 | - | All | All | All |
| Hardware | Netgear | Rbk753s | - | All | All | All |
| Hardware | Netgear | Rbk753s | - | All | All | All |
| Operating System | Netgear | Rbk753s Firmware | All | All | All | All |
| Operating System | Netgear | Rbk753s Firmware | All | All | All | All |
| Operating System | Netgear | Rbk753 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk753 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk842 | - | All | All | All |
| Hardware | Netgear | Rbk842 | - | All | All | All |
| Operating System | Netgear | Rbk842 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk842 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk852 | - | All | All | All |
| Hardware | Netgear | Rbk852 | - | All | All | All |
| Operating System | Netgear | Rbk852 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk852 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk853 | - | All | All | All |
| Hardware | Netgear | Rbk853 | - | All | All | All |
| Operating System | Netgear | Rbk853 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk853 Firmware | All | All | All | All |
| Hardware | Netgear | Rbr750 | - | All | All | All |
| Hardware | Netgear | Rbr750 | - | All | All | All |
| Operating System | Netgear | Rbr750 Firmware | All | All | All | All |
| Operating System | Netgear | Rbr750 Firmware | All | All | All | All |
| Hardware | Netgear | Rbr840 | - | All | All | All |
| Hardware | Netgear | Rbr840 | - | All | All | All |
| Operating System | Netgear | Rbr840 Firmware | All | All | All | All |
| Operating System | Netgear | Rbr840 Firmware | All | All | All | All |
| Hardware | Netgear | Rbr850 | - | All | All | All |
| Hardware | Netgear | Rbr850 | - | All | All | All |
| Operating System | Netgear | Rbr850 Firmware | All | All | All | All |
| Operating System | Netgear | Rbr850 Firmware | All | All | All | All |
| Hardware | Netgear | Rbs750 | - | All | All | All |
| Hardware | Netgear | Rbs750 | - | All | All | All |
| Operating System | Netgear | Rbs750 Firmware | All | All | All | All |
| Operating System | Netgear | Rbs750 Firmware | All | All | All | All |
| Hardware | Netgear | Rbs840 | - | All | All | All |
| Hardware | Netgear | Rbs840 | - | All | All | All |
| Operating System | Netgear | Rbs840 Firmware | All | All | All | All |
| Operating System | Netgear | Rbs840 Firmware | All | All | All | All |
| Hardware | Netgear | Rbs850 | - | All | All | All |
| Hardware | Netgear | Rbs850 | - | All | All | All |
| Operating System | Netgear | Rbs850 Firmware | All | All | All | All |
| Operating System | Netgear | Rbs850 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for Post-Authentication Command Injection on Some WiFi Systems, PSV-2020-0040 | Answer | NETGEAR Support | CONFIRM | kb.netgear.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.