RCE in Netgear Rbk752
CVE-2020-14441
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 bef…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-14441?
- CVE-2020-14441 is a high-severity vulnerability in Netgear Rbk752, classified under Command Injection. CVSS score: 8.8/10. Published 2020-06-18.
- How severe is CVE-2020-14441?
- High severity. CVSS v3 base score is 8.8 out of 10.