CVE-2020-10926
Quick assessment
Affected
NETGEAR R6700
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NETGEAR R6700是美国网件（NETGEAR）公司的一款无线路由器。 NETGEAR R6700 V1.0.4.84_10.0.58版本中固件更新的处理过程存在安全漏洞，该漏洞源于在进行更新之前，程序没有正确验证固件镜像。攻击者可利用该漏洞（及其他漏洞）执行任意代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-10926
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of firmware updates. The issue results from the lack of proper validation of the firmware image prior to performing an upgrade. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-9648.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
下载代码缺少完整性检查
Source: CVE Program / CVE List V5
Vulnerability Title
NETGEAR R6700 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NETGEAR R6700是美国网件（NETGEAR）公司的一款无线路由器。 NETGEAR R6700 V1.0.4.84_10.0.58版本中固件更新的处理过程存在安全漏洞，该漏洞源于在进行更新之前，程序没有正确验证固件镜像。攻击者可利用该漏洞（及其他漏洞）执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2020-10926
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-10926
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-10926 (1)
-
https://www.zerodayinitiative.com/advisories/ZDI-20-706/ x_refsource_MISC
Same Patch Batch · NETGEAR · 2020-07-28 · 10 CVEs total
| CVE-2020-15416 | NETGEAR R6700 缓冲区错误漏洞 | |
| CVE-2020-15417 | NETGEAR R6700 缓冲区错误漏洞 | |
| CVE-2020-10929 | NETGEAR R6700 输入验证错误漏洞 | |
| CVE-2020-10930 | NETGEAR R6700 安全漏洞 | |
| CVE-2020-10927 | NETGEAR R6700 加密问题漏洞 | |
| CVE-2020-10928 | NETGEAR R6700 缓冲区错误漏洞 | |
| CVE-2020-10924 | NETGEAR R6700 缓冲区错误漏洞 | |
| CVE-2020-10925 | NETGEAR R6700 信任管理问题漏洞 | |
| CVE-2020-10923 | NETGEAR R6700 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: NETGEAR
-
CVE-2026-9216
Insufficient input validation vulnerability exists in certai -
CVE-2026-9215
A CSRF vulnerability exists in certain NETGEAR XR series dev -
CVE-2026-9214
Insufficient input validation in NETGEAR R7000 router allows -
CVE-2026-11736
Stack-based buffer overflow vulnerability in some NETGEAR Ni -
CVE-2026-11735
Stack-based buffer overflow vulnerability in some NETGEAR Ni
Same weakness: CWE-494
-
CVE-2026-100265
JetBrains Rider 2026.2.1前AI助手技能自动更新漏洞 -
CVE-2026-102930
virtualenv: Downloaded seed wheels (pip/setuptools) are not -
CVE-2026-73595
Dell SCG Policy Manager代码执行漏洞（<5.34/5.36） -
CVE-2026-93534
spatie Scotty Self Update SelfUpdater.php update code downlo -
CVE-2026-7006
Sublime Text 4192/3207 Local Privilege Escalation via Update
V. Comments for CVE-2020-10926
No comments yet