[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPLckv-Uo3acy2pkzB75O_ltFQohLpMLnnTRw2f0gKKc":3,"g5a-risk:CVE-2020-15636":134},{"success":4,"data":5,"meta":132},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":59,"references":60,"referencesCount":59,"weaknesses":72,"weaknessesCount":81,"isActivelyExploited":82,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":123,"notableEvents":124},"CVE-2020-15636","What is CVE-2020-15636?","This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.84_10.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within the check_ra service. A crafted raePolicyVersion in a RAE_Policy.json file can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9852.","This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, an...","2020-08-20T01:17:13.493","2020-08-24T20:27:38.69",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":39,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":38,"ImpactScore":29},"zdi-disclosures@trendmicro.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",8.1,2.2,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":25,"ExploitabilityScore":45,"ImpactScore":45,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.08536,[46,46,46,46,46,46,46],"Critical",[50,55],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"netgear","r6700_firmware","*","cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",{"vendor":51,"product":56,"version":57,"criteria":58,"vulnerable":4},"r6700","v3","cpe:2.3:h:netgear:r6700:v3:*:*:*:*:*:*:*",2,[61,66],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fkb.netgear.com\u002F000062128\u002FSecurity-Advisory-for-Pre-Authentication-Stack-Overflow-on-R6700v3-PSV-2020-0224","Netgear",[65],"Vendor Advisory",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-20-937\u002F","Zerodayinitiative",[70,71],"Third Party Advisory","VDB Entry",[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",1,false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2020-15636? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-15636, a critical severity cyber security vulnerability from 2020. This vulnerability allows remote attackers to execute a...","CVE-2020-15636, CVE-2020-15636 vulnerability, CVE-2020-15636 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, netgear security, r6700_firmware vulnerability, r6700 vulnerability","\u002Fwhat-is\u002Fcve-2020-15636",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-15636","Cybersecurity","CVE-2020-15636, CVE-2020-15636 vulnerability, CVE-2020-15636 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":111,"Negate":27,"Nodes":112},"AND",[113,119],{"Operator":114,"Negate":27,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":118,"VersionEndIncluding":27},"4E99E8C5-D88D-409C-8233-944E254D587F","1.0.4.98",{"Operator":114,"Negate":27,"CPEMatch":120},[121],{"Vulnerable":27,"Criteria":58,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5A09A9E8-8C77-4EDB-9483-B3C540EF083A",[],[125],{"id":126,"eventType":127,"eventTime":128,"details":129,"label":130,"color":131},"33d3414e-20bb-4922-846a-60f5fbb2af76","LOW_EPSS_DELTA","2025-12-03T04:05:43.244442+00:00","Daily EPSS score decreased by 0.215 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":133,"version":42},1792443235632,{"score":135,"band":136,"action":137,"scoredAt":138},56,"Medium","Plan remediation","2026-10-16T06:49:14.717426+00:00"]