Sign-up

ID

VAR-202010-0578


CVE

CVE-2020-26912


TITLE

plural  NETGEAR  Cross-site request forgery vulnerability in device

Trust: 0.8

sources: JVNDB: JVNDB-2020-012216

DESCRIPTION

Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, and WNR2020 before 1.1.0.62. plural NETGEAR A cross-site request forgery vulnerability exists in the device.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state

Trust: 1.62

sources: NVD: CVE-2020-26912 // JVNDB: JVNDB-2020-012216

AFFECTED PRODUCTS

vendor:netgearmodel:r6050scope:ltversion:1.0.1.24

Trust: 1.0

vendor:netgearmodel:r6220scope:ltversion:1.1.0.100

Trust: 1.0

vendor:netgearmodel:d6200scope:ltversion:1.1.00.38

Trust: 1.0

vendor:netgearmodel:r6260scope:ltversion:1.1.0.64

Trust: 1.0

vendor:netgearmodel:r6700v2scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:jr6150scope:ltversion:1.0.1.24

Trust: 1.0

vendor:netgearmodel:r6120scope:ltversion:1.0.0.66

Trust: 1.0

vendor:netgearmodel:d7000scope:ltversion:1.0.1.78

Trust: 1.0

vendor:netgearmodel:r6080scope:ltversion:1.0.0.42

Trust: 1.0

vendor:netgearmodel:r7450scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:r6800scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:wnr2020scope:ltversion:1.1.0.62

Trust: 1.0

vendor:netgearmodel:r6020scope:ltversion:1.0.0.42

Trust: 1.0

vendor:netgearmodel:r6900v2scope:ltversion:1.2.0.62

Trust: 1.0

vendor:ネットギアmodel:d6200scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:d7000scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:jr6150scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6020scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6050scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6080scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6120scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6220scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6260scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6700v2scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2020-012216 // NVD: CVE-2020-26912

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-26912
value: HIGH

Trust: 1.0

cve@mitre.org: CVE-2020-26912
value: HIGH

Trust: 1.0

NVD: CVE-2020-26912
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202010-343
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2020-26912
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

nvd@nist.gov: CVE-2020-26912
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

cve@mitre.org: CVE-2020-26912
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
attackVector: ADJACENT
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
exploitabilityScore: 1.2
impactScore: 5.8
version: 3.1

Trust: 1.0

NVD: CVE-2020-26912
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2020-012216 // CNNVD: CNNVD-202010-343 // NVD: CVE-2020-26912 // NVD: CVE-2020-26912

PROBLEMTYPE DATA

problemtype:CWE-352

Trust: 1.0

problemtype:Cross-site request forgery (CWE-352) [NVD Evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2020-012216 // NVD: CVE-2020-26912

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202010-343

TYPE

cross-site request forgery

Trust: 0.6

sources: CNNVD: CNNVD-202010-343

PATCH

title:Security Advisory for Cross Site Request Forgery on Some Routers, PSV-2019-0018url:https://kb.netgear.com/000062341/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2019-0018

Trust: 0.8

title:Multiple NETGEAR Repair measures for product cross-site request forgery vulnerabilityurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=131130

Trust: 0.6

sources: JVNDB: JVNDB-2020-012216 // CNNVD: CNNVD-202010-343

EXTERNAL IDS

db:NVDid:CVE-2020-26912

Trust: 2.4

db:JVNDBid:JVNDB-2020-012216

Trust: 0.8

db:CNNVDid:CNNVD-202010-343

Trust: 0.6

sources: JVNDB: JVNDB-2020-012216 // CNNVD: CNNVD-202010-343 // NVD: CVE-2020-26912

REFERENCES

url:https://kb.netgear.com/000062341/security-advisory-for-cross-site-request-forgery-on-some-routers-psv-2019-0018

Trust: 1.6

url:https://nvd.nist.gov/vuln/detail/cve-2020-26912

Trust: 1.4

sources: JVNDB: JVNDB-2020-012216 // CNNVD: CNNVD-202010-343 // NVD: CVE-2020-26912

SOURCES

db:JVNDBid:JVNDB-2020-012216
db:CNNVDid:CNNVD-202010-343
db:NVDid:CVE-2020-26912

LAST UPDATE DATE

2024-11-23T22:40:56.322000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2020-012216date:2021-04-27T05:42:00
db:CNNVDid:CNNVD-202010-343date:2020-10-21T00:00:00
db:NVDid:CVE-2020-26912date:2024-11-21T05:20:28.717

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2020-012216date:2021-04-27T00:00:00
db:CNNVDid:CNNVD-202010-343date:2020-10-09T00:00:00
db:NVDid:CVE-2020-26912date:2020-10-09T07:15:16.980