PT-2020-17435 · NetGear · R6400+76

Published 2020-12-29 · Updated 2021-01-04 · CVE-2020-35795

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions AC2100 versions 1.2.0.72 and earlier AC2400 versions 1.2.0.72 and earlier AC2600 versions 1.2.0.72 and earlier CBK40 versions 2.5.0.10 and earlier CBR40 versions 2.5.0.10 and earlier D7800 versions 1.0.1.58 and earlier EAX20 versions 1.0.0.36 and earlier EAX80 versions 1.0.1.62 and earlier EX7500 versions 1.0.0.68 and earlier MK62 versions 1.0.5.102 and earlier MR60 versions 1.0.5.102 and earlier MS60 versions 1.0.5.102 and earlier R6120 versions 1.0.0.70 and earlier R6220 versions 1.1.0.100 and earlier R6230 versions 1.1.0.100 and earlier R6260 versions 1.1.0.76 and earlier R6330 versions 1.1.0.76 and earlier R6350 versions 1.1.0.76 and earlier R6400 versions 1.0.1.62 and earlier R6400v2 versions 1.0.4.98 and earlier R6700 versions 1.0.2.16 and earlier R6700v2 versions 1.2.0.72 and earlier R6700v3 versions 1.0.4.98 and earlier R6800 versions 1.2.0.72 and earlier R6850 versions 1.1.0.76 and earlier R6900P versions 1.3.2.124 and earlier R6900 versions 1.0.2.16 and earlier R6900v2 versions 1.2.0.72 and earlier R7000 versions 1.0.11.106 and earlier R7000P versions 1.3.2.124 and earlier R7200 versions 1.2.0.72 and earlier R7350 versions 1.2.0.72 and earlier R7400 versions 1.2.0.72 and earlier R7450 versions 1.2.0.72 and earlier R7800 versions 1.0.2.74 and earlier R7850 versions 1.0.5.60 and earlier R7900 versions 1.0.4.26 and earlier R7900P versions 1.4.1.62 and earlier R7960P versions 1.4.1.62 and earlier R8000 versions 1.0.4.58 and earlier R8000P versions 1.4.1.62 and earlier R8900 versions 1.0.5.24 and earlier R9000 versions 1.0.5.24 and earlier RAX120 versions 1.0.1.136 and earlier RAX15 versions 1.0.1.64 and earlier RAX20 versions 1.0.1.64 and earlier RAX200 versions 1.0.2.102 and earlier RAX45 versions 1.0.2.64 and earlier RAX50 versions 1.0.2.64 and earlier RAX75 versions 1.0.3.102 and earlier RAX80 versions 1.0.3.102 and earlier RBK12 versions 2.6.1.44 and earlier RBR10 versions 2.6.1.44 and earlier RBS10 versions 2.6.1.44 and earlier RBK20 versions 2.6.1.38 and earlier RBR20 versions 2.6.1.36 and earlier RBS20 versions 2.6.1.38 and earlier RBK40 versions 2.6.1.38 and earlier RBR40 versions 2.6.1.36 and earlier RBS40 versions 2.6.1.38 and earlier RBK50 versions 2.6.1.40 and earlier RBR50 versions 2.6.1.40 and earlier RBS50 versions 2.6.1.40 and earlier RBK752 versions 3.2.16.6 and earlier RBR750 versions 3.2.16.6 and earlier RBS750 versions 3.2.16.6 and earlier RBK842 versions 3.2.16.6 and earlier RBR840 versions 3.2.16.6 and earlier RBS840 versions 3.2.16.6 and earlier RBK852 versions 3.2.16.6 and earlier RBR850 versions 3.2.16.6 and earlier RBS850 versions 3.2.16.6 and earlier RS400 versions 1.5.0.48 and earlier XR300 versions 1.0.3.50 and earlier XR450 versions 2.3.2.66 and earlier XR500 versions 2.3.2.66 and earlier XR700 versions 1.0.1.34 and earlier

Description Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

Recommendations Update AC2100 to version 1.2.0.72 or later. Update AC2400 to version 1.2.0.72 or later. Update AC2600 to version 1.2.0.72 or later. Update CBK40 to version 2.5.0.10 or later. Update CBR40 to version 2.5.0.10 or later. Update D7800 to version 1.0.1.58 or later. Update EAX20 to version 1.0.0.36 or later. Update EAX80 to version 1.0.1.62 or later. Update EX7500 to version 1.0.0.68 or later. Update MK62 to version 1.0.5.102 or later. Update MR60 to version 1.0.5.102 or later. Update MS60 to version 1.0.5.102 or later. Update R6120 to version 1.0.0.70 or later. Update R6220 to version 1.1.0.100 or later. Update R6230 to version 1.1.0.100 or later. Update R6260 to version 1.1.0.76 or later. Update R6330 to version 1.1.0.76 or later. Update R6350 to version 1.1.0.76 or later. Update R6400 to version 1.0.1.62 or later. Update R6400v2 to version 1.0.4.98 or later. Update R6700 to version 1.0.2.16 or later. Update R6700v2 to version 1.2.0.72 or later. Update R6700v3 to version 1.0.4.98 or later. Update R6800 to version 1.2.0.72 or later. Update R6850 to version 1.1.0.76 or later. Update R6900P to version 1.3.2.124 or later. Update R6900 to version 1.0.2.16 or later. Update R6900v2 to version 1.2.0.72 or later. Update R7000 to version 1.0.11.106 or later. Update R7000P to version 1.3.2.124 or later. Update R7200 to version 1.2.0.72 or later. Update R7350 to version 1.2.0.72 or later. Update R7400 to version 1.2.0.72 or later. Update R7450 to version 1.2.0.72 or later. Update R7800 to version 1.0.2.74 or later. Update R7850 to version 1.0.5.60 or later. Update R7900 to version 1.0.4.26 or later. Update R7900P to version 1.4.1.62 or later. Update R7960P to version 1.4.1.62 or later. Update R8000 to version 1.0.4.58 or later. Update R8000P to version 1.4.1.62 or later. Update R8900 to version 1.0.5.24 or later. Update R9000 to version 1.0.5.24 or later. Update RAX120 to version 1.0.1.136 or later. Update RAX15 to version 1.0.1.64 or later. Update RAX20 to version 1.0.1.64 or later. Update RAX200 to version 1.0.2.102 or later. Update RAX45 to version 1.0.2.64 or later. Update RAX50 to version 1.0.2.64 or later. Update RAX75 to version 1.0.3.102 or later. Update RAX80 to version 1.0.3.102 or later. Update RBK12 to version 2.6.1.44 or later. Update RBR10 to version 2.6.1.44 or later. Update RBS10 to version 2.6.1.44 or later. Update RBK20 to version 2.6.1.38 or later. Update RBR20 to version 2.6.1.36 or later. Update RBS20 to version 2.6.1.38 or later. Update RBK40 to version 2.6.1.38 or later. Update RBR40 to version 2.6.1.36 or later. Update RBS40 to version 2.6.1.38 or later. Update RBK50 to version 2.6.1.40 or later. Update RBR50 to version 2.6.1.40 or later. Update RBS50 to version 2.6.1.40 or later. Update RBK752 to version 3.2.16.6 or later. Update RBR750 to version 3.2.16.6 or later. Update RBS750 to version 3.2.16.6 or later. Update RBK842 to version 3.2.16.6 or later. Update RBR840 to version 3.2.16.6 or later. Update RBS840 to version 3.2.16.6 or later. Update RBK852 to version 3.2.16.6 or later. Update RBR850 to version 3.2.16.6 or later. Update RBS850 to version 3.2.16.6 or later. Update RS400 to version 1.5.0.48 or later. Update XR300 to version 1.0.3.50 or later. Update XR450 to version 2.3.2.66 or later. Update XR500 to version 2.3.2.66 or later. Update XR700 to version 1.0.1.34 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-35795

Affected Products

Ac2100

Ac2400

Ac2600

Cbk40

Cbr40

D7800

Eax20

Eax80

Ex7500

Mk62

Mr60

Ms60

R6120

R6220

R6230

R6260

R6330

R6350

R6400

R6400V2

R6700

R6700V2

R6700V3

R6800

R6850

R6900

R6900P

R6900V2

R7000

R7000P

R7200

R7350

R7400

R7450

R7800

R7850

R7900

R7900P

R7960P

R8000

R8000P

R8900

R9000

Rax120

Rax15

Rax20

Rax200

Rax45

Rax50

Rax75

Rax80

Rbk12

Rbk20

Rbk40

Rbk50

Rbk752

Rbk842

Rbk852

Rbr10

Rbr20

Rbr40

Rbr50

Rbr750

Rbr840

Rbr850

Rbs10

Rbs20

Rbs40

Rbs50

Rbs750

Rbs840

Rbs850

Rs400

Xr300

Xr450

Xr500

Xr700

References · 5

• https://osv.dev/vulnerability/CVE-2020-35795 · Vendor Advisory
• https://kb.netgear.com/000062735/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-Range-Extenders-and-Orbi-WiFi-Systems-PSV-2020-0154 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35795 · Security Note
• https://t.me/cvenotify/8156 · Telegram Post
• https://t.me/cvenotify/7957 · Telegram Post