PT-2020-17439 · NetGear · Ex6150V2+45

Published

2020-12-29

·

Updated

2021-01-04

·

CVE-2020-35799

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions 1.0.0.0 through 1.0.0.75 NETGEAR D6000 versions 1.0.0.0 through 1.0.0.77 NETGEAR D6200 versions 1.0.0.0 through 1.1.00.31 NETGEAR D7000 versions 1.0.0.0 through 1.0.1.67 NETGEAR D7800 versions 1.0.0.0 through 1.0.1.55 NETGEAR DM200 versions 1.0.0.0 through 1.0.0.60 NETGEAR EX2700 versions 1.0.0.0 through 1.0.1.51 NETGEAR EX6100v2 versions 1.0.0.0 through 1.0.1.75 NETGEAR EX6150v2 versions 1.0.0.0 through 1.0.1.75 NETGEAR EX6200v2 versions 1.0.0.0 through 1.0.1.73 NETGEAR EX6400 versions 1.0.0.0 through 1.0.2.139 NETGEAR EX7300 versions 1.0.0.0 through 1.0.2.139 NETGEAR EX8000 versions 1.0.0.0 through 1.0.1.185 NETGEAR JR6150 versions 1.0.0.0 through 1.0.1.17 NETGEAR PR2000 versions 1.0.0.0 through 1.0.0.27 NETGEAR R6020 versions 1.0.0.0 through 1.0.0.37 NETGEAR R6050 versions 1.0.0.0 through 1.0.1.17 NETGEAR R6080 versions 1.0.0.0 through 1.0.0.37 NETGEAR R6120 versions 1.0.0.0 through 1.0.0.45 NETGEAR R6220 versions 1.0.0.0 through 1.1.0.79 NETGEAR R6230 versions 1.0.0.0 through 1.1.0.79 NETGEAR R6260 versions 1.0.0.0 through 1.1.0.39 NETGEAR R6700v2 versions 1.0.0.0 through 1.2.0.35 NETGEAR R6800 versions 1.0.0.0 through 1.2.0.35 NETGEAR R6900v2 versions 1.0.0.0 through 1.2.0.35 NETGEAR R7500v2 versions 1.0.0.0 through 1.0.3.39 NETGEAR R7800 versions 1.0.0.0 through 1.0.2.61 NETGEAR R8900 versions 1.0.0.0 through 1.0.4.11 NETGEAR R9000 versions 1.0.0.0 through 1.0.4.11 NETGEAR RBK20 versions 2.0.0.0 through 2.3.0.27 NETGEAR RBR20 versions 2.0.0.0 through 2.3.0.27 NETGEAR RBS20 versions 2.0.0.0 through 2.3.0.27 NETGEAR RBK40 versions 2.0.0.0 through 2.3.0.27 NETGEAR RBR40 versions 2.0.0.0 through 2.3.0.27 NETGEAR RBS40 versions 2.0.0.0 through 2.3.0.27 NETGEAR RBK50 versions 2.0.0.0 through 2.3.0.31 NETGEAR RBR50 versions 2.0.0.0 through 2.3.0.31 NETGEAR RBS50 versions 2.0.0.0 through 2.3.0.31 NETGEAR WN2000RPTv3 versions 1.0.0.0 through 1.0.1.33 NETGEAR WN3000RPv2 versions 1.0.0.0 through 1.0.0.77 NETGEAR WN3000RPv3 versions 1.0.0.0 through 1.0.2.77 NETGEAR WN3100RPv2 versions 1.0.0.0 through 1.0.0.65 NETGEAR WNR2000v5 versions 1.0.0.0 through 1.0.0.69 NETGEAR WNR2020 versions 1.0.0.0 through 1.1.0.61 NETGEAR XR450 versions 2.0.0.0 through 2.3.2.31 NETGEAR XR500 versions 2.0.0.0 through 2.3.2.31
Description Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
Recommendations Update D3600 to version 1.0.0.76 or later. Update D6000 to version 1.0.0.78 or later. Update D6200 to version 1.1.00.32 or later. Update D7000 to version 1.0.1.68 or later. Update D7800 to version 1.0.1.56 or later. Update DM200 to version 1.0.0.61 or later. Update EX2700 to version 1.0.1.52 or later. Update EX6100v2 to version 1.0.1.76 or later. Update EX6150v2 to version 1.0.1.76 or later. Update EX6200v2 to version 1.0.1.74 or later. Update EX6400 to version 1.0.2.140 or later. Update EX7300 to version 1.0.2.140 or later. Update EX8000 to version 1.0.1.186 or later. Update JR6150 to version 1.0.1.18 or later. Update PR2000 to version 1.0.0.28 or later. Update R6020 to version 1.0.0.38 or later. Update R6050 to version 1.0.1.18 or later. Update R6080 to version 1.0.0.38 or later. Update R6120 to version 1.0.0.46 or later. Update R6220 to version 1.1.0.80 or later. Update R6230 to version 1.1.0.80 or later. Update R6260 to version 1.1.0.40 or later. Update R6700v2 to version 1.2.0.36 or later. Update R6800 to version 1.2.0.36 or later. Update R6900v2 to version 1.2.0.36 or later. Update R7500v2 to version 1.0.3.40 or later. Update R7800 to version 1.0.2.62 or later. Update R8900 to version 1.0.4.12 or later. Update R9000 to version 1.0.4.12 or later. Update RBK20 to version 2.3.0.28 or later. Update RBR20 to version 2.3.0.28 or later. Update RBS20 to version 2.3.0.28 or later. Update RBK40 to version 2.3.0.28 or later. Update RBR40 to version 2.3.0.28 or later. Update RBS40 to version 2.3.0.28 or later. Update RBK50 to version 2.3.0.32 or later. Update RBR50 to version 2.3.0.32 or later. Update RBS50 to version 2.3.0.32 or later. Update WN2000RPTv3 to version 1.0.1.34 or later. Update WN3000RPv2 to version 1.0.0.78 or later. Update WN3000RPv3 to version 1.0.2.78 or later. Update WN3100RPv2 to version 1.0.0.66 or later. Update WNR2000v5 to version 1.0.0.70 or later. Update WNR2020 to version 1.1.0.62 or later. Update XR450 to version 2.3.2.32 or later. Update XR500 to version 2.3.2.32 or later.

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-35799

Affected Products

D3600
D6000
D6200
D7000
D7800
Dm200
Ex2700
Ex6100V2
Ex6150V2
Ex6200V2
Ex6400
Ex7300
Ex8000
Jr6150
Pr2000
R6020
R6050
R6080
R6120
R6220
R6230
R6260
R6700V2
R6800
R6900V2
R7500V2
R7800
R8900
R9000
Rbk20
Rbk40
Rbk50
Rbr20
Rbr40
Rbr50
Rbs20
Rbs40
Rbs50
Wn2000Rptv3
Wn3000Rpv2
Wn3000Rpv3
Wn3100Rpv2
Wnr2000V5
Wnr2020
Xr450
Xr500