PT-2020-6288 · NetGear · Netgear Dgn2200V1

Published 2020-12-15 · Updated 2024-03-05 · CVE-2020-35785

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR DGN2200v1 devices version 1.0.0.59 and earlier

Description The issue is related to the mishandling of HTTPd authentication in the NETGEAR DGN2200v1 devices, which can be exploited by a remote attacker to execute arbitrary code. This is due to deficiencies in the authentication procedure of the HTTPd daemon in the router's firmware.

Recommendations For NETGEAR DGN2200v1 devices version 1.0.0.59 and earlier, update to version 1.0.0.60 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTPd daemon to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2021-03933

CVE-2020-35785

Affected Products

Netgear Dgn2200V1

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2020-35785 · Security Note
• https://microsoft.com/security/blog/2021/06/30/microsoft-finds-new-netgear-firmware-vulnerabilities-that-could-lead-to-identity-theft-and-full-system-compromise · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03933 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35785 · Vendor Advisory
• https://kb.netgear.com/000062646/Security-Advisory-for-Multiple-HTTPd-Authentication-Vulnerabilities-on-DGN2200v1 · Vendor Advisory
• https://exploit-db.com/exploits/50099 · Note
• https://t.me/cvenotify/8025 · Telegram Post
• https://vulners.com/exploitdb/EDB-ID:50099 · Note
• https://twitter.com/attritionorg/status/1765119933044674810 · Twitter Post