PT-2020-10632 · NetGear · R6800+14

Published 2020-04-15 · Updated 2020-04-22 · CVE-2019-20657

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR D6200 versions prior to 1.1.00.36 NETGEAR D7000 versions prior to 1.0.1.74 NETGEAR PR2000 versions prior to 1.0.0.28 NETGEAR R6020 versions prior to 1.0.0.42 NETGEAR R6080 versions prior to 1.0.0.42 NETGEAR R6050 versions prior to 1.0.1.24 NETGEAR JR6150 versions prior to 1.0.1.24 NETGEAR R6120 versions prior to 1.0.0.48 NETGEAR R6220 versions prior to 1.1.0.86 NETGEAR R6230 versions prior to 1.1.0.86 NETGEAR R6260 versions prior to 1.1.0.64 NETGEAR R6700v2 versions prior to 1.2.0.62 NETGEAR R6800 versions prior to 1.2.0.62 NETGEAR R6900v2 versions prior to 1.2.0.62 NETGEAR WNR2020 versions prior to 1.1.0.62

Description The issue is a buffer overflow that can be triggered by an authenticated user. This affects various NETGEAR devices.

Recommendations For NETGEAR D6200 version prior to 1.1.00.36, update to version 1.1.00.36 or later. For NETGEAR D7000 version prior to 1.0.1.74, update to version 1.0.1.74 or later. For NETGEAR PR2000 version prior to 1.0.0.28, update to version 1.0.0.28 or later. For NETGEAR R6020 version prior to 1.0.0.42, update to version 1.0.0.42 or later. For NETGEAR R6080 version prior to 1.0.0.42, update to version 1.0.0.42 or later. For NETGEAR R6050 version prior to 1.0.1.24, update to version 1.0.1.24 or later. For NETGEAR JR6150 version prior to 1.0.1.24, update to version 1.0.1.24 or later. For NETGEAR R6120 version prior to 1.0.0.48, update to version 1.0.0.48 or later. For NETGEAR R6220 version prior to 1.1.0.86, update to version 1.1.0.86 or later. For NETGEAR R6230 version prior to 1.1.0.86, update to version 1.1.0.86 or later. For NETGEAR R6260 version prior to 1.1.0.64, update to version 1.1.0.64 or later. For NETGEAR R6700v2 version prior to 1.2.0.62, update to version 1.2.0.62 or later. For NETGEAR R6800 version prior to 1.2.0.62, update to version 1.2.0.62 or later. For NETGEAR R6900v2 version prior to 1.2.0.62, update to version 1.2.0.62 or later. For NETGEAR WNR2020 version prior to 1.1.0.62, update to version 1.1.0.62 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-20657

Affected Products

D6200

D7000

Jr6150

Pr2000

R6020

R6050

R6080

R6120

R6220

R6230

R6260

R6700V2

R6800

R6900V2

Wnr2020

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-20657 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20657 · Vendor Advisory
• https://kb.netgear.com/000061482/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-and-Gateways-PSV-2018-0619 · Vendor Advisory
• https://t.me/cvenotify/2824 · Telegram Post