CVE-2020-35795
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D7800 before 1.0.1.58, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX7500 before 1.0.0.68, MK62 before 1.0.5.102, MR60 before 1.0.5.102, MS60 before 1.0.5.102, R6120 before 1.0.0.70, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6330 before 1.1.0.76, R6350 before 1.1.0.76, R6400 before 1.0.1.62, R6400v2 before 1.0.4.98, R6700 before 1.0.2.16, R6700v2 before 1.2.0.72, R6700v3 before 1.0.4.98, R6800 before 1.2.0.72, R6850 before 1.1.0.76, R6900P before 1.3.2.124, R6900 before 1.0.2.16, R6900v2 before 1.2.0.72, R7000 before 1.0.11.106, R7000P before 1.3.2.124, R7200 before 1.2.0.72, R7350 before 1.2.0.72, R7400 before 1.2.0.72, R7450 before 1.2.0.72, R7800 before 1.0.2.74, R7850 before 1.0.5.60, R7900 before 1.0.4.26, R7900P before 1.4.1.62, R7960P before 1.4.1.62, R8000 before 1.0.4.58, R8000P before 1.4.1.62, R8900 before 1.0.5.24, R9000 before 1.0.5.24, RAX120 before 1.0.1.136, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX200 before 1.0.2.102, RAX45 before 1.0.2.64, RAX50 before 1.0.2.64, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK12 before 2.6.1.44, RBR10 before 2.6.1.44, RBS10 before 2.6.1.44, RBK20 before 2.6.1.38, RBR20 before 2.6.1.36, RBS20 before 2.6.1.38, RBK40 before 2.6.1.38, RBR40 before 2.6.1.36, RBS40 before 2.6.1.38, RBK50 before 2.6.1.40, RBR50 before 2.6.1.40, RBS50 before 2.6.1.40, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK842 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RS400 before 1.5.0.48, XR300 before 1.0.3.50, XR450 before 2.3.2.66, XR500 before 2.3.2.66, and XR700 before 1.0.1.34.
Affected (77)
Products: Netgear: Ac2100 Firmware, Ac2400 Firmware, Ac2600 Firmware, Cbk40 Firmware, Cbr40 Firmware, D7800 Firmware, Eax20 Firmware, Eax80 Firmware, Ex7500 Firmware, Mk62 Firmware, Mr60 Firmware, Ms60 Firmware, R6120 Firmware, R6220 Firmware, R6230 Firmware, R6260 Firmware, R6330 Firmware, R6350 Firmware, R6400 Firmware, R6400v2 Firmware, R6700 Firmware, R6700v2 Firmware, R6700v3 Firmware, R6800 Firmware, R6850 Firmware, R6900p Firmware, R6900 Firmware, R6900v2 Firmware, R7000 Firmware, R7000p Firmware, R7200 Firmware, R7350 Firmware, R7400 Firmware, R7450 Firmware, R7800 Firmware, R7850 Firmware, R7900 Firmware, R7900p Firmware, R7960p Firmware, R8000 Firmware, R8000p Firmware, R8900 Firmware, R9000 Firmware, Rax120 Firmware, Rax15 Firmware, Rax20 Firmware, Rax200 Firmware, Rax45 Firmware, Rax50 Firmware, Rax75 Firmware, Rax80 Firmware, Rbk12 Firmware, Rbr10 Firmware, Rbs10 Firmware, Rbk20 Firmware, Rbr20 Firmware, Rbs20 Firmware, Rbk40 Firmware, Rbr40 Firmware, Rbs40 Firmware, Rbk50 Firmware, Rbr50 Firmware, Rbs50 Firmware, Rbk752 Firmware, Rbr750 Firmware, Rbs750 Firmware, Rbk842 Firmware, Rbr840 Firmware, Rbs840 Firmware, Rbk852 Firmware, Rbr850 Firmware, Rbs850 Firmware, Rs400 Firmware, Xr300 Firmware, Xr450 Firmware, Xr500 Firmware, Xr700 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2100 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2400 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2600 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.5.0.10 |
| Running on/with | Platform Versions |
|---|---|
Netgear Cbk40 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.5.0.10 |
| Running on/with | Platform Versions |
|---|---|
Netgear Cbr40 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.58 |
| Running on/with | Platform Versions |
|---|---|
Netgear D7800 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear Eax20 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear Eax80 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.68 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex7500 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Mk62 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Mr60 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ms60 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.70 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6120 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.100 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6220 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.100 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6230 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.76 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6260 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.76 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6330 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.76 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6350 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6400 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.98 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6400v2 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.16 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700v2 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.98 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700v3 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6800 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.76 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6850 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.2.124 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900p | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.16 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900v2 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.11.106 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.2.124 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000p | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7200 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7350 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7400 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.72 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7450 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.74 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7800 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.60 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7850 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.26 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900p | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7960p | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.58 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8000 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8000p | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.24 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8900 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.24 |
| Running on/with | Platform Versions |
|---|---|
Netgear R9000 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.136 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax120 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.64 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax15 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.64 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax20 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax200 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.64 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax45 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.64 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax50 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax75 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax80 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk12 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr10 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs10 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.38 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk20 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr20 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.38 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs20 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.38 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk40 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr40 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.38 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs40 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.40 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk50 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.40 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr50 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.6.1.40 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs50 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk752 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr750 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs750 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk842 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr840 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs840 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk852 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr850 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs850 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.5.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rs400 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.50 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr300 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.2.66 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr450 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.2.66 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr500 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.34 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr700 | All versions |
References (2)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.