Unrated severityNVD Advisory· Published Mar 2, 2020· Updated Aug 5, 2024

CVE-2019-20488

Description

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface (setup.cgi) are vulnerable to command injection, allowing remote attackers to execute arbitrary commands, as demonstrated by shell metacharacters in the sysDNSHost parameter.

Affected products

NETGEAR/WNR1000V4description
Netgear/WNR1000v4llm-fuzzy
Range: = 1.1.0.54

Patches

Vulnerability mechanics

References

www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000