CVE-2019-20711
No fix known EPSS <1%CVSS 7.1
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, and XR500 before 2.3.2.32.
Products: netgear xr500_firmware, netgear d3600_firmware, netgear d6000_firmware