PT-2020-5893 · NetGear · Netgear Wac720+1

Published 2020-09-17 · Updated 2021-07-21 · CVE-2020-26924

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: NETGEAR WAC720 versions prior to 3.9.1.13 NETGEAR WAC730 versions prior to 3.9.1.13

Description: The issue is related to the lack of protection for service data in the firmware of NETGEAR WAC720 and WAC730 wireless access points. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information.

Recommendations: For NETGEAR WAC720 versions prior to 3.9.1.13, update to version 3.9.1.13 or later. For NETGEAR WAC730 versions prior to 3.9.1.13, update to version 3.9.1.13 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2021-01987

CVE-2020-26924

Affected Products

Netgear Wac720

Netgear Wac730

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-26924 · Security Note
• https://kb.netgear.com/000062328/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Wireless-Access-Points-PSV-2020-0141 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01987 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26924 · Vendor Advisory
• https://cxsecurity.com/cveshow/CVE-2020-26924 · Note