PatchTheCVECVE-2020-27867: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NE
CVE-2020-27867 is a medium-severity flaw (CVSS 6.8) affecting ac2100 firmware, ac2400 firmware, ac2600 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the mini_httpd service, which listens on TCP po
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.8 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 2.2% (top 17%) |
| CISA exploited list | No |
| Weakness | CWE-77 |
| Published | 2021-02-12 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-27867?
ac2100 firmware: upgrade to 1.2.0.76; ac2400 firmware: upgrade to 1.2.0.76; ac2600 firmware: upgrade to 1.2.0.76. Exact commands for each OS are on this page.
Is CVE-2020-27867 being exploited?
CVE-2020-27867 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-27867 affect?
CVE-2020-27867 affects ac2100 firmware, ac2400 firmware, ac2600 firmware. Severity is medium (CVSS 6.8). This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400
How urgent is CVE-2020-27867?
Priority 44/100. No elevated risk signals yet.
Software pages
Apache HTTP Server vulnerabilities · Netgear vulnerabilities
Related CVEs
- CVE-2021-45644 MEDIUM 6.8 UPGRADE UPGRADE Certain NETGEAR devices are affected by incorrect configuration of security settings
- CVE-2021-45637 HIGH 8.3 UPGRADE UPGRADE Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
- CVE-2021-45573 HIGH 8.3 UPGRADE UPGRADE Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
- CVE-2021-45534 HIGH 7.8 UPGRADE UPGRADE Certain NETGEAR devices are affected by command injection by an authenticated user
- CVE-2021-45511 MEDIUM 6.8 UPGRADE UPGRADE Certain NETGEAR devices are affected by authentication bypass