Sign-up

ID

VAR-202010-0574


CVE

CVE-2020-26908


TITLE

plural  NETGEAR  Vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2020-012220

DESCRIPTION

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before 1.0.0.42, R6050 before 1.0.1.22, JR6150 before 1.0.1.22, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R69002 before 1.2.0.62, and WNR2020 before 1.1.0.62. plural NETGEAR An unspecified vulnerability exists in the device.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state

Trust: 1.62

sources: NVD: CVE-2020-26908 // JVNDB: JVNDB-2020-012220

AFFECTED PRODUCTS

vendor:netgearmodel:r6260scope:ltversion:1.1.0.64

Trust: 1.0

vendor:netgearmodel:r6050scope:ltversion:1.0.1.22

Trust: 1.0

vendor:netgearmodel:r6220scope:ltversion:1.1.0.100

Trust: 1.0

vendor:netgearmodel:jr6150scope:ltversion:1.0.1.22

Trust: 1.0

vendor:netgearmodel:r6700v2scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:d7000scope:ltversion:1.0.1.74

Trust: 1.0

vendor:netgearmodel:pr2000scope:ltversion:1.0.0.30

Trust: 1.0

vendor:netgearmodel:r6120scope:ltversion:1.0.0.66

Trust: 1.0

vendor:netgearmodel:r6900scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:r6080scope:ltversion:1.0.0.42

Trust: 1.0

vendor:netgearmodel:r6800scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:r6230scope:ltversion:1.1.0.100

Trust: 1.0

vendor:netgearmodel:wnr2020scope:ltversion:1.1.0.62

Trust: 1.0

vendor:netgearmodel:d6200scope:ltversion:1.1.00.36

Trust: 1.0

vendor:netgearmodel:r6020scope:ltversion:1.0.0.42

Trust: 1.0

vendor:ネットギアmodel:d6200scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:d7000scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:jr6150scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:pr2000scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6020scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6050scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6080scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6120scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6220scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6230scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2020-012220 // NVD: CVE-2020-26908

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-26908
value: CRITICAL

Trust: 1.0

cve@mitre.org: CVE-2020-26908
value: CRITICAL

Trust: 1.0

NVD: CVE-2020-26908
value: CRITICAL

Trust: 0.8

CNNVD: CNNVD-202010-339
value: CRITICAL

Trust: 0.6

nvd@nist.gov: CVE-2020-26908
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

nvd@nist.gov: CVE-2020-26908
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

cve@mitre.org: CVE-2020-26908
baseSeverity: CRITICAL
baseScore: 9.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: LOW
exploitabilityScore: 3.9
impactScore: 5.5
version: 3.1

Trust: 1.0

NVD: CVE-2020-26908
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2020-012220 // CNNVD: CNNVD-202010-339 // NVD: CVE-2020-26908 // NVD: CVE-2020-26908

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

problemtype:Other (CWE-Other) [NVD Evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2020-012220 // NVD: CVE-2020-26908

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202010-339

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202010-339

PATCH

title:Security Advisory for Authentication Bypass Some Modems and Routers, PSV-2019-0001url:https://kb.netgear.com/000062346/Security-Advisory-for-Authentication-Bypass-Some-Modems-and-Routers-PSV-2019-0001

Trust: 0.8

title:Multiple NETGEAR Repair measures for device security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=131126

Trust: 0.6

sources: JVNDB: JVNDB-2020-012220 // CNNVD: CNNVD-202010-339

EXTERNAL IDS

db:NVDid:CVE-2020-26908

Trust: 2.4

db:JVNDBid:JVNDB-2020-012220

Trust: 0.8

db:CNNVDid:CNNVD-202010-339

Trust: 0.6

sources: JVNDB: JVNDB-2020-012220 // CNNVD: CNNVD-202010-339 // NVD: CVE-2020-26908

REFERENCES

url:https://kb.netgear.com/000062346/security-advisory-for-authentication-bypass-some-modems-and-routers-psv-2019-0001

Trust: 1.6

url:https://nvd.nist.gov/vuln/detail/cve-2020-26908

Trust: 1.4

sources: JVNDB: JVNDB-2020-012220 // CNNVD: CNNVD-202010-339 // NVD: CVE-2020-26908

SOURCES

db:JVNDBid:JVNDB-2020-012220
db:CNNVDid:CNNVD-202010-339
db:NVDid:CVE-2020-26908

LAST UPDATE DATE

2024-11-23T22:05:25.546000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2020-012220date:2021-04-27T05:44:00
db:CNNVDid:CNNVD-202010-339date:2020-10-21T00:00:00
db:NVDid:CVE-2020-26908date:2024-11-21T05:20:28.090

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2020-012220date:2021-04-27T00:00:00
db:CNNVDid:CNNVD-202010-339date:2020-10-09T00:00:00
db:NVDid:CVE-2020-26908date:2020-10-09T07:15:16.713