PT-2020-10692 · NetGear · Rbr50+23

Wayne Low · Published 2020-04-16 · Updated 2021-07-21 · CVE-2019-20717

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions D3600 versions prior to 1.0.0.75 D6000 versions prior to 1.0.0.75 D7800 versions prior to 1.0.1.44 EX2700 versions prior to 1.0.1.52 EX6200v2 versions prior to 1.0.1.74 EX8000 versions prior to 1.0.1.180 R7500v2 versions prior to 1.0.3.38 R7800 versions prior to 1.0.2.58 RBK20 versions prior to 2.3.0.28 RBR20 versions prior to 2.3.0.28 RBS20 versions prior to 2.3.0.28 RBK50 versions prior to 2.3.0.32 RBR50 versions prior to 2.3.0.32 RBS50 versions prior to 2.3.0.32 RBS40 versions prior to 2.3.0.28 SRK60 versions prior to 2.2.1.210 SRR60 versions prior to 2.2.1.210 SRS60 versions prior to 2.2.1.210 WN2000RPTv3 versions prior to 1.0.1.34 WN3000RPv2 versions prior to 1.0.0.68 WN3000RPv3 versions prior to 1.0.2.70 WN3100RPv2 versions prior to 1.0.0.60 WNDR4300v2 versions prior to 1.0.0.58 WNDR4500v3 versions prior to 1.0.0.58

Description The issue affects certain NETGEAR devices, causing a denial of service.

Recommendations For D3600 versions prior to 1.0.0.75, update to version 1.0.0.75 or later. For D6000 versions prior to 1.0.0.75, update to version 1.0.0.75 or later. For D7800 versions prior to 1.0.1.44, update to version 1.0.1.44 or later. For EX2700 versions prior to 1.0.1.52, update to version 1.0.1.52 or later. For EX6200v2 versions prior to 1.0.1.74, update to version 1.0.1.74 or later. For EX8000 versions prior to 1.0.1.180, update to version 1.0.1.180 or later. For R7500v2 versions prior to 1.0.3.38, update to version 1.0.3.38 or later. For R7800 versions prior to 1.0.2.58, update to version 1.0.2.58 or later. For RBK20 versions prior to 2.3.0.28, update to version 2.3.0.28 or later. For RBR20 versions prior to 2.3.0.28, update to version 2.3.0.28 or later. For RBS20 versions prior to 2.3.0.28, update to version 2.3.0.28 or later. For RBK50 versions prior to 2.3.0.32, update to version 2.3.0.32 or later. For RBR50 versions prior to 2.3.0.32, update to version 2.3.0.32 or later. For RBS50 versions prior to 2.3.0.32, update to version 2.3.0.32 or later. For RBS40 versions prior to 2.3.0.28, update to version 2.3.0.28 or later. For SRK60 versions prior to 2.2.1.210, update to version 2.2.1.210 or later. For SRR60 versions prior to 2.2.1.210, update to version 2.2.1.210 or later. For SRS60 versions prior to 2.2.1.210, update to version 2.2.1.210 or later. For WN2000RPTv3 versions prior to 1.0.1.34, update to version 1.0.1.34 or later. For WN3000RPv2 versions prior to 1.0.0.68, update to version 1.0.0.68 or later. For WN3000RPv3 versions prior to 1.0.2.70, update to version 1.0.2.70 or later. For WN3100RPv2 versions prior to 1.0.0.60, update to version 1.0.0.60 or later. For WNDR4300v2 versions prior to 1.0.0.58, update to version 1.0.0.58 or later. For WNDR4500v3 versions prior to 1.0.0.58, update to version 1.0.0.58 or later.

Fix

Related Identifiers

CVE-2019-20717

Affected Products

D3600

D6000

D7800

Ex2700

Ex6200V2

Ex8000

R7500V2

R7800

Rbk20

Rbk50

Rbr20

Rbr50

Rbs20

Rbs40

Rbs50

Srk60

Srr60

Srs60

Wn2000Rptv3

Wn3000Rpv2

Wn3000Rpv3

Wn3100Rpv2

Wndr4300V2

Wndr4500V3

References · 3

• https://osv.dev/vulnerability/CVE-2019-20717 · Vendor Advisory
• https://kb.netgear.com/000061211/Security-Advisory-for-Denial-of-Service-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2018-0225 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20717 · Security Note