Security readout for executives and security teams
Plain-English summary
CVE-2019-20724 is a post-authentication command injection flaw in multiple NETGEAR routers, gateways, and WiFi systems. An already authenticated user on an adjacent network could potentially execute commands with serious confidentiality, integrity, and availability impact. The main business concern is exposed or poorly controlled administrator access on affected firmware.
Executive priority
Treat this as a moderate-priority network appliance issue. Prioritize internet-edge or business-critical sites only if affected devices are present and administration is broadly accessible.
Technical view
The CVE lists command injection reachable after authentication on specific NETGEAR models before fixed firmware versions. CVSS 3.0 is 6.8 with adjacent-network access, low complexity, high privileges required, no user interaction, and high C/I/A impact. No CWE is provided in the source bundle.
Likely exposure
Exposure is limited to the named NETGEAR D-series, R-series, RBK/RBR/RBS, WNDR/WNR, and XR500 devices running firmware older than the versions listed in the CVE description.
Exploitation context
The provided bundle does not show CISA KEV listing or other evidence of active exploitation. Exploitation requires an authenticated user and adjacent-network access, but successful exploitation could have high device impact.
Researcher notes
The source bundle gives affected models and version thresholds but lacks endpoint details, CWE mapping, exploit narrative, and vendor remediation text beyond the advisory reference. Avoid assuming unauthenticated or remote internet exploitability from this record alone.
Mitigation direction
- Inventory NETGEAR devices and match model plus firmware against the affected list.
- Upgrade affected devices to the listed fixed firmware version or later.
- Review NETGEAR advisory PSV-2018-0144 for model-specific guidance.
- Restrict administrative access to authorized users and trusted management networks.
- Replace unsupported devices if fixed firmware is unavailable.
Validation and detection
- Confirm each affected model is no longer below the listed fixed firmware version.
- Verify administrative access is limited to expected users and network locations.
- Check device logs for unexpected authenticated administrative activity.
- Document any affected device that cannot be upgraded and track compensating controls.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Execution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2019-20724 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.8 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N0.95.9Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
6.8MediumVector: CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
Source materials
- CVE List V5 sourceCVE List V5
- https://kb.netgear.com/000061204/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0144CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.