PT-2020-8784 · NetGear · Netgear D6000+1

Published 2020-04-21 · Updated 2020-04-23 · CVE-2018-21140

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.76 NETGEAR D6000 versions prior to 1.0.0.76

Description The issue is related to the incorrect configuration of security settings in certain NETGEAR devices.

Recommendations For NETGEAR D3600 versions prior to 1.0.0.76, update to version 1.0.0.76 or later. For NETGEAR D6000 versions prior to 1.0.0.76, update to version 1.0.0.76 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-21140

Affected Products

Netgear D3600

Netgear D6000

References · 4

• https://osv.dev/vulnerability/CVE-2018-21140 · Vendor Advisory
• https://kb.netgear.com/000060221/Security-Advisory-for-Security-Misconfiguration-on-Some-Modem-Routers-PSV-2018-0097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-21140 · Security Note
• https://t.me/cvenotify/2998 · Telegram Post