PT-2020-5842 · NetGear · Netgear Wc7600+3

Published 2020-09-17 · Updated 2021-07-21 · CVE-2020-26931

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: NETGEAR WC7500 versions prior to 6.5.5.24 NETGEAR WC7600 versions prior to 6.5.5.24 NETGEAR WC7600v2 versions prior to 6.5.5.24 NETGEAR WC9500 versions prior to 6.5.5.24

Description: The issue is related to the disclosure of sensitive information due to a lack of protection for service data. This could allow a remote attacker to gain unauthorized access to protected information.

Recommendations: For NETGEAR WC7500 versions prior to 6.5.5.24, update to version 6.5.5.24 or later. For NETGEAR WC7600 versions prior to 6.5.5.24, update to version 6.5.5.24 or later. For NETGEAR WC7600v2 versions prior to 6.5.5.24, update to version 6.5.5.24 or later. For NETGEAR WC9500 versions prior to 6.5.5.24, update to version 6.5.5.24 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2021-01849

CVE-2020-26931

Affected Products

Netgear Wc7500

Netgear Wc7600

Netgear Wc7600V2

Netgear Wc9500

References · 5

• https://kb.netgear.com/000062321/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Wireless-Controllers-PSV-2020-0268 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26931 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26931 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01849 · Security Note
• https://cxsecurity.com/cveshow/CVE-2020-26931 · Note