Medium severity6.4NVD Advisory· Published Dec 30, 2020· Updated Jun 17, 2026

CVE-2020-35791

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before 1.0.5.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/R7800 Firmware
cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*
Range: <1.0.2.68
Netgear/R8900 Firmware
cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*
Range: <1.0.5.2
Netgear/R9000 Firmware
cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*
Range: <1.0.5.2
NETGEAR/devicesdescription
Netgear/R8900llm-fuzzy
Range: <1.0.5.2
Netgear/R9000llm-fuzzy
Range: <1.0.5.2
Netgear/R7800llm-fuzzy
Range: <1.0.2.68

Patches

Vulnerability mechanics

References

kb.netgear.com/000062714/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0079nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000