PT-2021-11434 · NetGear · Netgear R7450

1Sd3D · Published 2021-01-18 · Updated 2021-02-08 · CVE-2020-27872

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NETGEAR R7450 version 1.2.0.62 1.0.1

Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 routers. The specific flaw exists within the mini httpd service, which listens on TCP port 80 by default. The issue results from improper state tracking in the password recovery process. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root.

Recommendations: For NETGEAR R7450 version 1.2.0.62 1.0.1, as a temporary workaround, consider disabling the mini httpd service until a patch is available. Restrict access to the password recovery process to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-642

CWE-668

Related Identifiers

CVE-2020-27872

ZDI-21-071

Affected Products

Netgear R7450

References · 7

• https://kb.netgear.com/000062641/Security-Advisory-for-Password-Recovery-Vulnerabilities-on-Some-Routers · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-071 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-27872 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27872 · Vendor Advisory
• https://t.me/cvenotify/9430 · Telegram Post
• https://t.me/cvenotify/9617 · Telegram Post
• https://t.me/cibsecurity/23080 · Telegram Post