PT-2020-17436 · NetGear · R6400+68

Published

2020-12-29

·

Updated

2021-01-04

·

CVE-2020-35796

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CBR40 versions prior to 2.5.0.10 D6220 versions prior to 1.0.0.60 D6400 versions prior to 1.0.0.94 D7000v2 versions prior to 1.0.0.62 D8500 versions prior to 1.0.3.50 DC112A versions prior to 1.0.0.48 DGN2200v4 versions prior to 1.0.0.114 EAX20 versions prior to 1.0.0.36 EAX80 versions prior to 1.0.1.62 EX3700 versions prior to 1.0.0.84 EX3800 versions prior to 1.0.0.84 EX3920 versions prior to 1.0.0.84 EX6000 versions prior to 1.0.0.44 EX6100 versions prior to 1.0.2.28 EX6120 versions prior to 1.0.0.54 EX6130 versions prior to 1.0.0.36 EX6150 versions prior to 1.0.0.46 EX6200 versions prior to 1.0.3.94 EX6920 versions prior to 1.0.0.54 EX7000 versions prior to 1.0.1.90 EX7500 versions prior to 1.0.0.68 MK62 versions prior to 1.0.5.102 MR60 versions prior to 1.0.5.102 MS60 versions prior to 1.0.5.102 R6250 versions prior to 1.0.4.42 R6300v2 versions prior to 1.0.4.42 R6400 versions prior to 1.0.1.62 R6400v2 versions prior to 1.0.4.98 R6700v3 versions prior to 1.0.4.98 R6700 versions prior to 1.0.2.16 R6900P versions prior to 1.3.2.124 R6900 versions prior to 1.0.2.16 R7000 versions prior to 1.0.11.106 R7000P versions prior to 1.3.2.124 R7100LG versions prior to 1.0.0.56 R7850 versions prior to 1.0.5.60 R7900 versions prior to 1.0.4.26 R7900P versions prior to 1.4.1.62 R7960P versions prior to 1.4.1.62 R8000 versions prior to 1.0.4.58 R8000P versions prior to 1.4.1.62 R8300 versions prior to 1.0.2.134 R8500 versions prior to 1.0.2.134 RAX15 versions prior to 1.0.1.64 RAX20 versions prior to 1.0.1.64 RAX200 versions prior to 1.0.2.102 RAX45 versions prior to 1.0.2.32 RAX50 versions prior to 1.0.2.32 RAX75 versions prior to 1.0.3.102 RAX80 versions prior to 1.0.3.102 RBK752 versions prior to 3.2.16.6 RBR750 versions prior to 3.2.16.6 RBS750 versions prior to 3.2.16.6 RBK842 versions prior to 3.2.16.6 RBR840 versions prior to 3.2.16.6 RBS840 versions prior to 3.2.16.6 RBK852 versions prior to 3.2.16.6 RBR850 versions prior to 3.2.16.6 RBS850 versions prior to 3.2.16.6 RBS40V-200 versions prior to 1.0.0.46 RBW30 versions prior to 2.5.0.4 RS400 versions prior to 1.5.0.48 WN2500RPv2 versions prior to 1.0.1.56 WN3500RP versions prior to 1.0.0.28 WNDR3400v3 versions prior to 1.0.1.32 WNR1000v3 versions prior to 1.0.2.78 WNR2000v2 versions prior to 1.2.0.12 WNR3500Lv2 versions prior to 1.2.0.62 XR300 versions prior to 1.0.3.50
Description Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-35796

Affected Products

Cbr40
D6220
D6400
D7000V2
D8500
Dc112A
Dgn2200V4
Eax20
Eax80
Ex3700
Ex3800
Ex3920
Ex6000
Ex6100
Ex6120
Ex6130
Ex6150
Ex6200
Ex6920
Ex7000
Ex7500
Mk62
Mr60
Ms60
R6250
R6300V2
R6400
R6400V2
R6700
R6700V3
R6900
R6900P
R7000
R7000P
R7100Lg
R7850
R7900
R7900P
R7960P
R8000
R8000P
R8300
R8500
Rax15
Rax20
Rax200
Rax45
Rax50
Rax75
Rax80
Rbk752
Rbk842
Rbk852
Rbr750
Rbr840
Rbr850
Rbs40V-200
Rbs750
Rbs840
Rbs850
Rbw30
Rs400
Wn2500Rpv2
Wn3500Rp
Wndr3400V3
Wnr1000V3
Wnr2000V2
Wnr3500Lv2
Xr300