PT-2020-17443 · NetGear · R6800+14

Published

2020-12-29

·

Updated

2021-01-04

·

CVE-2020-35803

CVSS v3.1

4.4

Medium

VectorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions NETGEAR D6200 versions prior to 1.1.00.40 NETGEAR D7000 versions prior to 1.0.1.78 NETGEAR R6020 versions prior to 1.0.0.46 NETGEAR R6080 versions prior to 1.0.0.46 NETGEAR R6120 versions prior to 1.0.0.72 NETGEAR R6220 versions prior to 1.1.0.100 NETGEAR R6230 versions prior to 1.1.0.100 NETGEAR R6260 versions prior to 1.1.0.76 NETGEAR R6700v2 versions prior to 1.2.0.74 NETGEAR R6800 versions prior to 1.2.0.74 NETGEAR R6900v2 versions prior to 1.2.0.74 NETGEAR R7450 versions prior to 1.2.0.74 NETGEAR AC2100 versions prior to 1.2.0.74 NETGEAR AC2400 versions prior to 1.2.0.74 NETGEAR AC2600 versions prior to 1.2.0.74
Description The issue concerns the disclosure of sensitive information in certain NETGEAR devices.
Recommendations Update D6200 to version 1.1.00.40 or later. Update D7000 to version 1.0.1.78 or later. Update R6020 to version 1.0.0.46 or later. Update R6080 to version 1.0.0.46 or later. Update R6120 to version 1.0.0.72 or later. Update R6220 to version 1.1.0.100 or later. Update R6230 to version 1.1.0.100 or later. Update R6260 to version 1.1.0.76 or later. Update R6700v2 to version 1.2.0.74 or later. Update R6800 to version 1.2.0.74 or later. Update R6900v2 to version 1.2.0.74 or later. Update R7450 to version 1.2.0.74 or later. Update AC2100 to version 1.2.0.74 or later. Update AC2400 to version 1.2.0.74 or later. Update AC2600 to version 1.2.0.74 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2020-35803

Affected Products

Ac2100
Ac2400
Ac2600
D6200
D7000
R6020
R6080
R6120
R6220
R6230
R6260
R6700V2
R6800
R6900V2
R7450