PT-2020-10665 · NetGear · Netgear R6220+7

Published 2020-04-16 · Updated 2020-08-24 · CVE-2019-20690

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR D6200 versions prior to 1.1.00.30 NETGEAR D7000 versions prior to 1.0.1.66 NETGEAR R6020 versions prior to 1.0.0.34 NETGEAR R6080 versions prior to 1.0.0.34 NETGEAR R6120 versions prior to 1.0.0.44 NETGEAR R6220 versions prior to 1.1.0.68 NETGEAR WNR2020 versions prior to 1.1.0.54 NETGEAR WNR614 versions prior to 1.1.0.54

Description The issue is related to authentication bypass, which affects certain NETGEAR devices.

Recommendations For D6200, update to version 1.1.00.30 or later. For D7000, update to version 1.0.1.66 or later. For R6020, update to version 1.0.0.34 or later. For R6080, update to version 1.0.0.34 or later. For R6120, update to version 1.0.0.44 or later. For R6220, update to version 1.1.0.68 or later. For WNR2020, update to version 1.1.0.54 or later. For WNR614, update to version 1.1.0.54 or later.

Fix

Related Identifiers

CVE-2019-20690

Affected Products

Netgear D6200

Netgear R7000

Netgear R6020

Netgear R6080

Netgear R6120

Netgear R6220

Netgear Wnr2020

Netgear Wnr614

References · 3

• https://kb.netgear.com/000061449/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-and-Gateways-PSV-2018-0073 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20690 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20690 · Vendor Advisory