High severity8.3NVD Advisory· Published Dec 30, 2020· Updated Jun 17, 2026

CVE-2020-35792

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NETGEAR/devicesdescription
Netgear/R8900llm-fuzzy
Range: <1.0.5.2
Netgear/R9000llm-fuzzy
Range: <1.0.5.2
Netgear/R7800llm-fuzzy
Range: <1.0.2.68
Netgear/R7500v2llm-fuzzy
Range: <1.0.3.48
Netgear/R7500 Firmware
cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3.48
Netgear/R8900 Firmware
cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*
Range: <1.0.5.2
Netgear/R9000 Firmware
cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*
Range: <1.0.5.2
Netgear/R7800 Firmware
cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*
Range: <1.0.2.68

Patches

Vulnerability mechanics

References

kb.netgear.com/000062682/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0157nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000