PT-2020-10471 · NetGear · Netgear Wnr1000V4

Published 2020-03-02 · Updated 2020-08-24 · CVE-2019-20489

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR WNR1000V4 version 1.1.0.54

Description An issue in the web management interface allows for authentication bypass, enabling an attacker to remotely compromise the device. This can be achieved by sending a request to the FW remote.htm&todo=cfg init endpoint without a cookie, then reading the Set-Cookie header from the 401 Unauthorized response, and finally repeating the request with the specified cookie.

Recommendations For NETGEAR WNR1000V4 version 1.1.0.54, as a temporary workaround, consider restricting access to the web management interface until a patch is available. Avoid using the setup.cgi interface from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-20489

Affected Products

Netgear Wnr1000V4

References · 3

• https://osv.dev/vulnerability/CVE-2019-20489 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20489 · Security Note
• https://nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2 · Note