Sign-up

ID

VAR-202010-0582


CVE

CVE-2020-26916


TITLE

plural  NETGEAR  Vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2020-012210

DESCRIPTION

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.50, and WNR2020 before 1.1.0.62. plural NETGEAR An unspecified vulnerability exists in the device.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state

Trust: 1.62

sources: NVD: CVE-2020-26916 // JVNDB: JVNDB-2020-012210

AFFECTED PRODUCTS

vendor:netgearmodel:r6050scope:ltversion:1.0.1.24

Trust: 1.0

vendor:netgearmodel:r6220scope:ltversion:1.1.0.100

Trust: 1.0

vendor:netgearmodel:d6200scope:ltversion:1.1.00.38

Trust: 1.0

vendor:netgearmodel:r6260scope:ltversion:1.1.0.64

Trust: 1.0

vendor:netgearmodel:r6700v2scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:jr6150scope:ltversion:1.0.1.24

Trust: 1.0

vendor:netgearmodel:wnr2020scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:r6120scope:ltversion:1.0.0.66

Trust: 1.0

vendor:netgearmodel:d7000scope:ltversion:1.0.1.78

Trust: 1.0

vendor:netgearmodel:r6080scope:ltversion:1.0.0.42

Trust: 1.0

vendor:netgearmodel:r7450scope:ltversion:1.2.0.50

Trust: 1.0

vendor:netgearmodel:r6800scope:ltversion:1.2.0.62

Trust: 1.0

vendor:netgearmodel:r6020scope:ltversion:1.0.0.42

Trust: 1.0

vendor:netgearmodel:r6900v2scope:ltversion:1.2.0.62

Trust: 1.0

vendor:ネットギアmodel:d6200scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:d7000scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:jr6150scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6020scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6050scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6080scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6120scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6220scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6260scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6700v2scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2020-012210 // NVD: CVE-2020-26916

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-26916
value: MEDIUM

Trust: 1.0

cve@mitre.org: CVE-2020-26916
value: MEDIUM

Trust: 1.0

NVD: CVE-2020-26916
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202010-346
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2020-26916
severity: MEDIUM
baseScore: 5.8
vectorString: AV:A/AC:L/AU:N/C:P/I:P/A:P
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 6.5
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

nvd@nist.gov: CVE-2020-26916
baseSeverity: MEDIUM
baseScore: 6.3
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: 2.8
impactScore: 3.4
version: 3.1

Trust: 1.0

cve@mitre.org: CVE-2020-26916
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 2.5
version: 3.1

Trust: 1.0

NVD: CVE-2020-26916
baseSeverity: MEDIUM
baseScore: 6.3
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2020-012210 // CNNVD: CNNVD-202010-346 // NVD: CVE-2020-26916 // NVD: CVE-2020-26916

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

problemtype:Other (CWE-Other) [NVD Evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2020-012210 // NVD: CVE-2020-26916

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202010-346

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202010-346

PATCH

title:Security Advisory for Security Misconfiguration on Some Routers, PSV-2019-0012url:https://kb.netgear.com/000062337/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2019-0012

Trust: 0.8

title:Multiple NETGEAR Repair measures for device security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=131133

Trust: 0.6

sources: JVNDB: JVNDB-2020-012210 // CNNVD: CNNVD-202010-346

EXTERNAL IDS

db:NVDid:CVE-2020-26916

Trust: 2.4

db:JVNDBid:JVNDB-2020-012210

Trust: 0.8

db:CNNVDid:CNNVD-202010-346

Trust: 0.6

sources: JVNDB: JVNDB-2020-012210 // CNNVD: CNNVD-202010-346 // NVD: CVE-2020-26916

REFERENCES

url:https://kb.netgear.com/000062337/security-advisory-for-security-misconfiguration-on-some-routers-psv-2019-0012

Trust: 1.6

url:https://nvd.nist.gov/vuln/detail/cve-2020-26916

Trust: 1.4

sources: JVNDB: JVNDB-2020-012210 // CNNVD: CNNVD-202010-346 // NVD: CVE-2020-26916

SOURCES

db:JVNDBid:JVNDB-2020-012210
db:CNNVDid:CNNVD-202010-346
db:NVDid:CVE-2020-26916

LAST UPDATE DATE

2024-11-23T22:11:17.859000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2020-012210date:2021-04-27T05:40:00
db:CNNVDid:CNNVD-202010-346date:2020-10-21T00:00:00
db:NVDid:CVE-2020-26916date:2024-11-21T05:20:29.347

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2020-012210date:2021-04-27T00:00:00
db:CNNVDid:CNNVD-202010-346date:2020-10-09T00:00:00
db:NVDid:CVE-2020-26916date:2020-10-09T07:15:17.323