CVE-2020-26920
No fix known EPSS 1%CVSS 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110.
Products: netgear srk60_firmware, netgear srr60_firmware, netgear srs60_firmware