PT-2020-10705 · NetGear · R6700+43

Published

2020-04-16

·

Updated

2020-04-22

·

CVE-2019-20730

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions D3600 versions 1.0.0.0 through 1.0.0.67 D6000 versions 1.0.0.0 through 1.0.0.67 D6200 versions 1.0.0.0 through 1.1.00.27 D6220 versions 1.0.0.0 through 1.0.0.39 D6400 versions 1.0.0.0 through 1.0.0.73 D7000 versions 1.0.0.0 through 1.0.1.59 D7000v2 versions 1.0.0.0 through 1.0.0.73 D7800 versions 1.0.0.0 through 1.0.1.33 D8500 versions 1.0.0.0 through 1.0.3.38 DC112A versions 1.0.0.0 through 1.0.0.39 EX8000 versions 1.0.0.0 through 1.0.0.117 JR6150 versions 1.0.0.0 through 1.0.1.17 R6050 versions 1.0.0.0 through 1.0.1.17 R6220 versions 1.0.0.0 through 1.1.0.65 R6250 versions 1.0.0.0 through 1.0.4.25 R6300v2 versions 1.0.0.0 through 1.0.4.23 R6400 versions 1.0.0.0 through 1.0.1.35 R6400v2 versions 1.0.0.0 through 1.0.2.51 R6700 versions 1.0.0.0 through 1.0.1.43 R6700v2 versions 1.0.0.0 through 1.2.0.15 R6800 versions 1.0.0.0 through 1.2.0.15 R6900 versions 1.0.0.0 through 1.0.1.43 R6900v2 versions 1.0.0.0 through 1.2.0.15 R7000 versions 1.0.0.0 through 1.0.9.25 R6900P versions 1.0.0.0 through 1.3.0.19 R7000P versions 1.0.0.0 through 1.3.0.19 R7100LG versions 1.0.0.0 through 1.0.0.39 R7300DST versions 1.0.0.0 through 1.0.0.61 R7500 versions 1.0.0.0 through 1.0.0.117 R7500v2 versions 1.0.0.0 through 1.0.3.25 R7800 versions 1.0.0.0 through 1.0.2.39 R7900 versions 1.0.0.0 through 1.0.2.9 R8000 versions 1.0.0.0 through 1.0.4.11 R7900P versions 1.0.0.0 through 1.3.0.9 R8000P versions 1.0.0.0 through 1.3.0.9 R8300 versions 1.0.0.0 through 1.0.2.115 R8500 versions 1.0.0.0 through 1.0.2.115 R8900 versions 1.0.0.0 through 1.0.3.5 R9000 versions 1.0.0.0 through 1.0.3.9 WNDR3700v4 versions 1.0.0.0 through 1.0.2.101 WNDR3700v5 versions 1.0.0.0 through 1.1.0.53 WNDR4300v1 versions 1.0.0.0 through 1.0.2.97 WNDR4300v2 versions 1.0.0.0 through 1.0.0.55 WNDR4500v3 versions 1.0.0.0 through 1.0.0.55
Description Certain NETGEAR devices are affected by SQL injection.
Recommendations Update D3600 to version 1.0.0.68 or later. Update D6000 to version 1.0.0.68 or later. Update D6200 to version 1.1.00.28 or later. Update D6220 to version 1.0.0.40 or later. Update D6400 to version 1.0.0.74 or later. Update D7000 to version 1.0.1.60 or later. Update D7000v2 to version 1.0.0.74 or later. Update D7800 to version 1.0.1.34 or later. Update D8500 to version 1.0.3.39 or later. Update DC112A to version 1.0.0.40 or later. Update EX8000 to version 1.0.0.118 or later. Update JR6150 to version 1.0.1.18 or later. Update R6050 to version 1.0.1.18 or later. Update R6220 to version 1.1.0.66 or later. Update R6250 to version 1.0.4.26 or later. Update R6300v2 to version 1.0.4.24 or later. Update R6400 to version 1.0.1.36 or later. Update R6400v2 to version 1.0.2.52 or later. Update R6700 to version 1.0.1.44 or later. Update R6700v2 to version 1.2.0.16 or later. Update R6800 to version 1.2.0.16 or later. Update R6900 to version 1.0.1.44 or later. Update R6900v2 to version 1.2.0.16 or later. Update R7000 to version 1.0.9.26 or later. Update R6900P to version 1.3.0.20 or later. Update R7000P to version 1.3.0.20 or later. Update R7100LG to version 1.0.0.40 or later. Update R7300DST to version 1.0.0.62 or later. Update R7500 to version 1.0.0.118 or later. Update R7500v2 to version 1.0.3.26 or later. Update R7800 to version 1.0.2.40 or later. Update R7900 to version 1.0.2.10 or later. Update R8000 to version 1.0.4.12 or later. Update R7900P to version 1.3.0.10 or later. Update R8000P to version 1.3.0.10 or later. Update R8300 to version 1.0.2.116 or later. Update R8500 to version 1.0.2.116 or later. Update R8900 to version 1.0.3.6 or later. Update R9000 to version 1.0.3.10 or later. Update WNDR3700v4 to version 1.0.2.102 or later. Update WNDR3700v5 to version 1.1.0.54 or later. Update WNDR4300v1 to version 1.0.2.98 or later. Update WNDR4300v2 to version 1.0.0.56 or later. Update WNDR4500v3 to version 1.0.0.56 or later.

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-20730

Affected Products

D3600
D6000
D6200
D6220
D6400
D7000
D7000V2
D7800
D8500
Dc112A
Ex8000
Jr6150
R6050
R6220
R6250
R6300V2
R6400
R6400V2
R6700
R6700V2
R6800
R6900
R6900P
R6900V2
R7000
R7000P
R7100Lg
R7300Dst
R7500
R7500V2
R7800
R7900
R7900P
R8000
R8000P
R8300
R8500
R8900
R9000
Wndr3700V4
Wndr3700V5
Wndr4300V1
Wndr4300V2
Wndr4500V3