Details of VAR-202010-0579

ID

VAR-202010-0579

CVE

CVE-2020-26913

TITLE

plural NETGEAR Out-of-bounds write vulnerability in device

Trust: 0.8

sources: JVNDB: JVNDB-2020-012214

DESCRIPTION

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, SRK60 before 2.2.2.20, SRR60 before 2.2.2.20, SRS60 before 2.2.2.20, WN3000RPv2 before 1.0.0.78, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.70, XR450 before 2.3.2.40, and XR500 before 2.3.2.40. plural NETGEAR The device contains an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state

Trust: 1.62

sources: NVD: CVE-2020-26913 // JVNDB: JVNDB-2020-012214

AFFECTED PRODUCTS

vendor:	netgear	model:	r9000	scope:	lt	version:	1.0.4.26	Trust: 1.0
vendor:	netgear	model:	rbr50	scope:	lt	version:	2.3.0.32	Trust: 1.0
vendor:	netgear	model:	srs60	scope:	lt	version:	2.2.2.20	Trust: 1.0
vendor:	netgear	model:	wndr4500v3	scope:	lt	version:	1.0.0.58	Trust: 1.0
vendor:	netgear	model:	wnr2000v5	scope:	lt	version:	1.0.0.70	Trust: 1.0
vendor:	netgear	model:	srk60	scope:	lt	version:	2.2.2.20	Trust: 1.0
vendor:	netgear	model:	xr500	scope:	lt	version:	2.3.2.40	Trust: 1.0
vendor:	netgear	model:	rbk40	scope:	lt	version:	2.3.0.28	Trust: 1.0
vendor:	netgear	model:	rbr20	scope:	lt	version:	2.3.0.28	Trust: 1.0
vendor:	netgear	model:	r7800	scope:	lt	version:	1.0.2.60	Trust: 1.0
vendor:	netgear	model:	wn3000rpv2	scope:	lt	version:	1.0.0.78	Trust: 1.0
vendor:	netgear	model:	rbk20	scope:	lt	version:	2.3.0.28	Trust: 1.0
vendor:	netgear	model:	rbk50	scope:	lt	version:	2.3.0.32	Trust: 1.0
vendor:	netgear	model:	rbs40	scope:	lt	version:	2.3.0.28	Trust: 1.0
vendor:	netgear	model:	srr60	scope:	lt	version:	2.2.2.20	Trust: 1.0
vendor:	netgear	model:	xr450	scope:	lt	version:	2.3.2.40	Trust: 1.0
vendor:	netgear	model:	d6100	scope:	lt	version:	1.0.0.63	Trust: 1.0
vendor:	netgear	model:	r8900	scope:	lt	version:	1.0.4.26	Trust: 1.0
vendor:	netgear	model:	wndr4300v2	scope:	lt	version:	1.0.0.58	Trust: 1.0
vendor:	netgear	model:	rbs50	scope:	lt	version:	2.3.0.32	Trust: 1.0
vendor:	netgear	model:	rbs20	scope:	lt	version:	2.3.0.28	Trust: 1.0
vendor:	ネットギア	model:	d6100	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r7800	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r8900	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r9000	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbk20	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbk50	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbr20	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbr50	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs20	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs50	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2020-012214 // NVD: CVE-2020-26913

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-26913
value:	MEDIUM
Trust: 1.0
cve@mitre.org:	CVE-2020-26913
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2020-26913
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202010-344
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2020-26913
severity:	MEDIUM
baseScore:	5.2
vectorString:	AV:A/AC:L/AU:S/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	5.1
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8

nvd@nist.gov:	CVE-2020-26913
baseSeverity:	MEDIUM
baseScore:	6.8
vectorString:	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.9
impactScore:	5.9
version:	3.1
Trust: 2.0
OTHER:	JVNDB-2020-012214
baseSeverity:	MEDIUM
baseScore:	6.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2020-012214 // CNNVD: CNNVD-202010-344 // NVD: CVE-2020-26913 // NVD: CVE-2020-26913

PROBLEMTYPE DATA

problemtype:	CWE-787	Trust: 1.0
problemtype:	Out-of-bounds writing (CWE-787) [NVD Evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2020-012214 // NVD: CVE-2020-26913

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202010-344

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202010-344

PATCH

title:	Security Advisory for Post-Authentication Stack Overflow on Some Routers and WiFi Systems, PSV-2018-0140	url:	https://kb.netgear.com/000062340/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2018-0140	Trust: 0.8
title:	Multiple NETGEAR Fix for device buffer error vulnerability	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=131131	Trust: 0.6

sources: JVNDB: JVNDB-2020-012214 // CNNVD: CNNVD-202010-344

EXTERNAL IDS

db:	NVD	id:	CVE-2020-26913	Trust: 2.4
db:	JVNDB	id:	JVNDB-2020-012214	Trust: 0.8
db:	CNNVD	id:	CNNVD-202010-344	Trust: 0.6

sources: JVNDB: JVNDB-2020-012214 // CNNVD: CNNVD-202010-344 // NVD: CVE-2020-26913

REFERENCES

url:	https://kb.netgear.com/000062340/security-advisory-for-post-authentication-stack-overflow-on-some-routers-and-wifi-systems-psv-2018-0140	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2020-26913	Trust: 1.4

sources: JVNDB: JVNDB-2020-012214 // CNNVD: CNNVD-202010-344 // NVD: CVE-2020-26913

SOURCES

db:	JVNDB	id:	JVNDB-2020-012214
db:	CNNVD	id:	CNNVD-202010-344
db:	NVD	id:	CVE-2020-26913

LAST UPDATE DATE

2024-11-23T22:58:08.273000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2020-012214	date:	2021-04-27T05:42:00
db:	CNNVD	id:	CNNVD-202010-344	date:	2020-10-21T00:00:00
db:	NVD	id:	CVE-2020-26913	date:	2024-11-21T05:20:28.870

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2020-012214	date:	2021-04-27T00:00:00
db:	CNNVD	id:	CNNVD-202010-344	date:	2020-10-09T00:00:00
db:	NVD	id:	CVE-2020-26913	date:	2020-10-09T07:15:17.043