RCE in Netgear Rbk752
CVE-2020-14440
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 bef…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.020 (78.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-14440?
- CVE-2020-14440 is a high-severity vulnerability in Netgear Rbk752, classified under Command Injection. CVSS score: 8.8/10. Published 2020-06-18.
- How severe is CVE-2020-14440?
- High severity. CVSS v3 base score is 8.8 out of 10.