PT-2020-10704 · NetGear · Jndr3000+19

Published 2020-04-16 · Updated 2021-07-21 · CVE-2019-20729

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AC:L/AV:L/A:L/C:H/I:H/PR:H/S:C/UI:N

Name of the Vulnerable Software and Affected Versions JNDR3000 versions 1.0.0.0 through 1.0.0.21 R6250 versions 1.0.0.0 through 1.0.4.25 R6300v2 versions 1.0.0.0 through 1.0.4.21 R6400 versions 1.0.0.0 through 1.0.1.35 R6400v2 versions 1.0.0.0 through 1.0.2.51 R6700 versions 1.0.0.0 through 1.0.1.43 R6900 versions 1.0.0.0 through 1.0.1.43 R7000 versions 1.0.0.0 through 1.0.9.27 R6900P versions 1.0.0.0 through 1.3.1.25 R7000P versions 1.0.0.0 through 1.3.1.25 R7300DST versions 1.0.0.0 through 1.0.0.61 R7900 versions 1.0.0.0 through 1.0.2.15 R8000 versions 1.0.0.0 through 1.0.4.17 R7900P versions 1.0.0.0 through 1.4.1.41 R8000P versions 1.0.0.0 through 1.4.1.41 R8300 versions 1.0.0.0 through 1.0.2.115 R8500 versions 1.0.0.0 through 1.0.2.115 WNDR3400v3 versions 1.0.0.0 through 1.0.1.17 WNDR4500v2 versions 1.0.0.0 through 1.0.0.67 WNR3500Lv2 versions 1.0.0.0 through 1.2.0.47

Description The issue is related to the incorrect configuration of security settings in certain NETGEAR devices.

Recommendations Update JNDR3000 to version 1.0.0.22 or later. Update R6250 to version 1.0.4.26 or later. Update R6300v2 to version 1.0.4.22 or later. Update R6400 to version 1.0.1.36 or later. Update R6400v2 to version 1.0.2.52 or later. Update R6700 to version 1.0.1.44 or later. Update R6900 to version 1.0.1.44 or later. Update R7000 to version 1.0.9.28 or later. Update R6900P to version 1.3.1.26 or later. Update R7000P to version 1.3.1.26 or later. Update R7300DST to version 1.0.0.62 or later. Update R7900 to version 1.0.2.16 or later. Update R8000 to version 1.0.4.18 or later. Update R7900P to version 1.4.1.42 or later. Update R8000P to version 1.4.1.42 or later. Update R8300 to version 1.0.2.116 or later. Update R8500 to version 1.0.2.116 or later. Update WNDR3400v3 to version 1.0.1.18 or later. Update WNDR4500v2 to version 1.0.0.68 or later. Update WNR3500Lv2 to version 1.2.0.48 or later.

Fix

Related Identifiers

CVE-2019-20729

Affected Products

Jndr3000

R6250

R6300V2

R6400

R6400V2

R6700

R6900

R6900P

R7000

R7000P

R7300Dst

R7900

R7900P

R8000

R8000P

R8300

R8500

Wndr3400V3

Wndr4500V2

Wnr3500Lv2

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-20729 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20729 · Vendor Advisory
• https://kb.netgear.com/000061198/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-3120 · Vendor Advisory
• https://t.me/cvenotify/2857 · Telegram Post