CVE-2020-35796
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX3920 before 1.0.0.84, EX6000 before 1.0.0.44, EX6100 before 1.0.2.28, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX6150 before 1.0.0.46, EX6200 before 1.0.3.94, EX6920 before 1.0.0.54, EX7000 before 1.0.1.90, EX7500 before 1.0.0.68, MK62 before 1.0.5.102, MR60 before 1.0.5.102, MS60 before 1.0.5.102, R6250 before 1.0.4.42, R6300v2 before 1.0.4.42, R6400 before 1.0.1.62, R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R6700 before 1.0.2.16, R6900P before 1.3.2.124, R6900 before 1.0.2.16, R7000 before 1.0.11.106, R7000P before 1.3.2.124, R7100LG before 1.0.0.56, R7850 before 1.0.5.60, R7900 before 1.0.4.26, R7900P before 1.4.1.62, R7960P before 1.4.1.62, R8000 before 1.0.4.58, R8000P before 1.4.1.62, R8300 before 1.0.2.134, R8500 before 1.0.2.134, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX200 before 1.0.2.102, RAX45 before 1.0.2.32, RAX50 before 1.0.2.32, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK842 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RBS40V-200 before 1.0.0.46, RBW30 before 2.5.0.4, RS400 before 1.5.0.48, WN2500RPv2 before 1.0.1.56, WN3500RP before 1.0.0.28, WNDR3400v3 before 1.0.1.32, WNR1000v3 before 1.0.2.78, WNR2000v2 before 1.2.0.12, WNR3500Lv2 before 1.2.0.62, and XR300 before 1.0.3.50.
Affected (69)
Products: Netgear: Cbr40 Firmware, D6220 Firmware, D6400 Firmware, D7000v2 Firmware, D8500 Firmware, Dc112a Firmware, Dgn2200v4 Firmware, Eax20 Firmware, Eax80 Firmware, Ex3700 Firmware, Ex3800 Firmware, Ex3920 Firmware, Ex6000 Firmware, Ex6100 Firmware, Ex6120 Firmware, Ex6130 Firmware, Ex6150 Firmware, Ex6200 Firmware, Ex6920 Firmware, Ex7000 Firmware, Ex7500 Firmware, Mk62 Firmware, Mr60 Firmware, Ms60 Firmware, R6250 Firmware, R6300v2 Firmware, R6400 Firmware, R6400v2 Firmware, R6700v3 Firmware, R6700 Firmware, R6900p Firmware, R6900 Firmware, R7000 Firmware, R7000p Firmware, R7100lg Firmware, R7850 Firmware, R7900 Firmware, R7900p Firmware, R7960p Firmware, R8000 Firmware, R8000p Firmware, R8300 Firmware, R8500 Firmware, Rax15 Firmware, Rax20 Firmware, Rax200 Firmware, Rx45 Firmware, Rax50 Firmware, Rax75 Firmware, Rax80 Firmware, Rbk752 Firmware, Rbr750 Firmware, Rbs750 Firmware, Rbk842 Firmware, Rbr840 Firmware, Rbs840 Firmware, Rbk852 Firmware, Rbr850 Firmware, Rbs850 Firmware, Rbs40v 200 Firmware, Rbw30 Firmware, Rs400 Firmware, Wn2500rpv2 Firmware, Wn3500rp Firmware, Wndr3400v3 Firmware, Wnr1000v3 Firmware, Wnr2000v2 Firmware, Wnr3500lv2 Firmware, Xr300 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.5.0.10 |
| Running on/with | Platform Versions |
|---|---|
Netgear Cbr40 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.60 |
| Running on/with | Platform Versions |
|---|---|
Netgear D6220 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.94 |
| Running on/with | Platform Versions |
|---|---|
Netgear D6400 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear D7000v2 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.50 |
| Running on/with | Platform Versions |
|---|---|
Netgear D8500 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear Dc112a | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.114 |
| Running on/with | Platform Versions |
|---|---|
Netgear Dgn2200v4 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear Eax20 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear Eax80 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.84 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex3700 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.84 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex3800 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.84 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex3920 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex6000 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex6100 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.54 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex6120 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex6130 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.46 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex6150 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.94 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex6200 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.54 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex6920 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.90 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex7000 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.68 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ex7500 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Mk62 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Mr60 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ms60 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.42 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6250 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.42 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6300v2 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6400 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.98 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6400v2 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.98 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700v3 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.16 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.2.124 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900p | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.16 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.11.106 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.2.124 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000p | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.56 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7100lg | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.5.60 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7850 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.26 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900p | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7960p | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.58 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8000 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8000p | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.134 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8300 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.134 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8500 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.64 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax15 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.64 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax20 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax200 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.32 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rx45 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.32 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax50 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax75 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax80 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk752 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr750 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs750 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk842 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr840 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs840 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk852 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr850 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs850 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.46 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs40v 200 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.5.0.4 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbw30 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.5.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rs400 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.56 |
| Running on/with | Platform Versions |
|---|---|
Netgear Wn2500rpv2 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear Wn3500rp | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.32 |
| Running on/with | Platform Versions |
|---|---|
Netgear Wndr3400v3 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.78 |
| Running on/with | Platform Versions |
|---|---|
Netgear Wnr1000v3 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.12 |
| Running on/with | Platform Versions |
|---|---|
Netgear Wnr2000v2 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear Wnr3500lv2 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.50 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr300 | All versions |
References (2)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.