Details of VAR-202012-1175

ID

VAR-202012-1175

CVE

CVE-2020-35800

TITLE

plural NETGEAR Vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2020-015016

DESCRIPTION

plural NETGEAR An unspecified vulnerability exists in the device.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state.

Trust: 0.8

sources: JVNDB: JVNDB-2020-015016

AFFECTED PRODUCTS

vendor:	netgear	model:	rax40	scope:	lt	version:	1.0.3.80	Trust: 1.0
vendor:	netgear	model:	d6220	scope:	lt	version:	1.0.0.60	Trust: 1.0
vendor:	netgear	model:	ex3920	scope:	lt	version:	1.0.0.84	Trust: 1.0
vendor:	netgear	model:	ex7000	scope:	lt	version:	1.0.1.90	Trust: 1.0
vendor:	netgear	model:	ms60	scope:	lt	version:	1.0.5.102	Trust: 1.0
vendor:	netgear	model:	d6000	scope:	lt	version:	1.0.0.80	Trust: 1.0
vendor:	netgear	model:	ex6100v2	scope:	lt	version:	1.0.1.94	Trust: 1.0
vendor:	netgear	model:	r6250	scope:	lt	version:	1.0.4.42	Trust: 1.0
vendor:	netgear	model:	r7400	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	rbr50	scope:	lt	version:	2.6.1.40	Trust: 1.0
vendor:	netgear	model:	r6900	scope:	lt	version:	1.0.2.16	Trust: 1.0
vendor:	netgear	model:	ex6920	scope:	lt	version:	1.0.0.54	Trust: 1.0
vendor:	netgear	model:	rbr40	scope:	lt	version:	2.6.1.38	Trust: 1.0
vendor:	netgear	model:	r7350	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	mk62	scope:	lt	version:	1.0.5.102	Trust: 1.0
vendor:	netgear	model:	rbs850	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	rbk50	scope:	lt	version:	2.6.1.40	Trust: 1.0
vendor:	netgear	model:	rbk12	scope:	lt	version:	2.6.1.44	Trust: 1.0
vendor:	netgear	model:	ex6000	scope:	lt	version:	1.0.0.44	Trust: 1.0
vendor:	netgear	model:	cbk40	scope:	lt	version:	2.5.0.10	Trust: 1.0
vendor:	netgear	model:	ex7300	scope:	lt	version:	1.0.2.152	Trust: 1.0
vendor:	netgear	model:	rax120	scope:	lt	version:	1.0.1.136	Trust: 1.0
vendor:	netgear	model:	rbs10	scope:	lt	version:	2.6.1.44	Trust: 1.0
vendor:	netgear	model:	ex6410	scope:	lt	version:	1.0.0.128	Trust: 1.0
vendor:	netgear	model:	rbs750	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	rbs50y	scope:	lt	version:	2.6.1.40	Trust: 1.0
vendor:	netgear	model:	wnr1000v3	scope:	lt	version:	1.0.2.78	Trust: 1.0
vendor:	netgear	model:	rax200	scope:	lt	version:	1.0.5.24	Trust: 1.0
vendor:	netgear	model:	rax75	scope:	lt	version:	1.0.3.102	Trust: 1.0
vendor:	netgear	model:	rbr850	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	ex6150v1	scope:	lt	version:	1.0.0.46	Trust: 1.0
vendor:	netgear	model:	r6230	scope:	lt	version:	1.1.0.100	Trust: 1.0
vendor:	netgear	model:	r8500	scope:	lt	version:	1.0.2.134	Trust: 1.0
vendor:	netgear	model:	r9000	scope:	lt	version:	1.0.5.24	Trust: 1.0
vendor:	netgear	model:	eax80	scope:	lt	version:	1.0.1.62	Trust: 1.0
vendor:	netgear	model:	r6400v1	scope:	lt	version:	1.0.1.62	Trust: 1.0
vendor:	netgear	model:	dm200	scope:	lt	version:	1.0.0.66	Trust: 1.0
vendor:	netgear	model:	r7800	scope:	lt	version:	1.0.2.74	Trust: 1.0
vendor:	netgear	model:	d7800	scope:	lt	version:	1.0.3.48	Trust: 1.0
vendor:	netgear	model:	ac2100	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	ex2700	scope:	lt	version:	1.0.1.58	Trust: 1.0
vendor:	netgear	model:	r7900	scope:	lt	version:	1.0.4.26	Trust: 1.0
vendor:	netgear	model:	r6300v2	scope:	lt	version:	1.0.4.42	Trust: 1.0
vendor:	netgear	model:	xr300	scope:	lt	version:	1.0.3.50	Trust: 1.0
vendor:	netgear	model:	ex7700	scope:	lt	version:	1.0.0.210	Trust: 1.0
vendor:	netgear	model:	wnr2000v2	scope:	lt	version:	1.2.0.12	Trust: 1.0
vendor:	netgear	model:	rax50	scope:	lt	version:	1.0.2.64	Trust: 1.0
vendor:	netgear	model:	r6260	scope:	lt	version:	1.1.0.76	Trust: 1.0
vendor:	netgear	model:	r8900	scope:	lt	version:	1.0.5.24	Trust: 1.0
vendor:	netgear	model:	rbk20	scope:	lt	version:	2.6.1.38	Trust: 1.0
vendor:	netgear	model:	wndr3400v3	scope:	lt	version:	1.0.1.32	Trust: 1.0
vendor:	netgear	model:	ex6110	scope:	lt	version:	1.0.1.68	Trust: 1.0
vendor:	netgear	model:	ex6200v1	scope:	lt	version:	1.0.3.94	Trust: 1.0
vendor:	netgear	model:	r6120	scope:	lt	version:	1.0.0.70	Trust: 1.0
vendor:	netgear	model:	rbr20	scope:	lt	version:	2.6.1.36	Trust: 1.0
vendor:	netgear	model:	xr700	scope:	lt	version:	1.0.1.34	Trust: 1.0
vendor:	netgear	model:	ex3110	scope:	lt	version:	1.0.1.68	Trust: 1.0
vendor:	netgear	model:	ex7500	scope:	lt	version:	1.0.0.68	Trust: 1.0
vendor:	netgear	model:	d7000v2	scope:	lt	version:	1.0.0.62	Trust: 1.0
vendor:	netgear	model:	xr500	scope:	lt	version:	2.3.2.66	Trust: 1.0
vendor:	netgear	model:	rbr840	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	r7960p	scope:	lt	version:	1.4.1.62	Trust: 1.0
vendor:	netgear	model:	r6700v3	scope:	lt	version:	1.0.4.98	Trust: 1.0
vendor:	netgear	model:	ex3800	scope:	lt	version:	1.0.0.84	Trust: 1.0
vendor:	netgear	model:	ac2600	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	ex6250	scope:	lt	version:	1.0.0.128	Trust: 1.0
vendor:	netgear	model:	ex8000	scope:	lt	version:	1.0.1.224	Trust: 1.0
vendor:	netgear	model:	ac2400	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	cbr40	scope:	lt	version:	2.5.0.10	Trust: 1.0
vendor:	netgear	model:	rax20	scope:	lt	version:	1.0.1.64	Trust: 1.0
vendor:	netgear	model:	rbs20	scope:	lt	version:	2.6.1.38	Trust: 1.0
vendor:	netgear	model:	rbs50	scope:	lt	version:	2.6.1.40	Trust: 1.0
vendor:	netgear	model:	r6330	scope:	lt	version:	1.1.0.76	Trust: 1.0
vendor:	netgear	model:	rbk852	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	r8000p	scope:	lt	version:	1.4.1.62	Trust: 1.0
vendor:	netgear	model:	r7500v2	scope:	lt	version:	1.0.3.48	Trust: 1.0
vendor:	netgear	model:	r6800	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	r6900p	scope:	lt	version:	1.3.2.124	Trust: 1.0
vendor:	netgear	model:	xr450	scope:	lt	version:	2.3.2.66	Trust: 1.0
vendor:	netgear	model:	rs400	scope:	lt	version:	1.5.0.48	Trust: 1.0
vendor:	netgear	model:	r6900v2	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	r6350	scope:	lt	version:	1.1.0.76	Trust: 1.0
vendor:	netgear	model:	dc112a	scope:	lt	version:	1.0.0.48	Trust: 1.0
vendor:	netgear	model:	ex3700	scope:	lt	version:	1.0.0.84	Trust: 1.0
vendor:	netgear	model:	ex6400v2	scope:	lt	version:	1.0.0.128	Trust: 1.0
vendor:	netgear	model:	ex6130	scope:	lt	version:	1.0.0.36	Trust: 1.0
vendor:	netgear	model:	ex7320	scope:	lt	version:	1.0.0.128	Trust: 1.0
vendor:	netgear	model:	r8300	scope:	lt	version:	1.0.2.134	Trust: 1.0
vendor:	netgear	model:	ex6400	scope:	lt	version:	1.0.2.152	Trust: 1.0
vendor:	netgear	model:	r7000	scope:	lt	version:	1.0.11.106	Trust: 1.0
vendor:	netgear	model:	r6400v2	scope:	lt	version:	1.0.4.98	Trust: 1.0
vendor:	netgear	model:	rbs40v-200	scope:	lt	version:	1.0.0.46	Trust: 1.0
vendor:	netgear	model:	ex6120	scope:	lt	version:	1.0.0.54	Trust: 1.0
vendor:	netgear	model:	r7850	scope:	lt	version:	1.0.5.60	Trust: 1.0
vendor:	netgear	model:	wn2500rpv2	scope:	lt	version:	1.0.1.56	Trust: 1.0
vendor:	netgear	model:	mr60	scope:	lt	version:	1.0.5.102	Trust: 1.0
vendor:	netgear	model:	eax20	scope:	lt	version:	1.0.0.36	Trust: 1.0
vendor:	netgear	model:	r6700v1	scope:	lt	version:	1.0.2.16	Trust: 1.0
vendor:	netgear	model:	rbk842	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	wn3000rpv3	scope:	lt	version:	1.0.2.86	Trust: 1.0
vendor:	netgear	model:	rbr750	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	r7200	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	r6700v2	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	rbw30	scope:	lt	version:	2.5.0.4	Trust: 1.0
vendor:	netgear	model:	d6400	scope:	lt	version:	1.0.0.94	Trust: 1.0
vendor:	netgear	model:	ex7300v2	scope:	lt	version:	1.0.0.128	Trust: 1.0
vendor:	netgear	model:	rbs40v	scope:	lt	version:	2.5.1.6	Trust: 1.0
vendor:	netgear	model:	r8000	scope:	lt	version:	1.0.4.58	Trust: 1.0
vendor:	netgear	model:	r7100lg	scope:	lt	version:	1.0.0.56	Trust: 1.0
vendor:	netgear	model:	rax80	scope:	lt	version:	1.0.3.102	Trust: 1.0
vendor:	netgear	model:	wn3500rpv1	scope:	lt	version:	1.0.0.28	Trust: 1.0
vendor:	netgear	model:	rax45	scope:	lt	version:	1.0.2.64	Trust: 1.0
vendor:	netgear	model:	rbk40	scope:	lt	version:	2.6.1.38	Trust: 1.0
vendor:	netgear	model:	ex6150v2	scope:	lt	version:	1.0.1.94	Trust: 1.0
vendor:	netgear	model:	dgn2200v4	scope:	lt	version:	1.0.0.114	Trust: 1.0
vendor:	netgear	model:	rbs40	scope:	lt	version:	2.6.1.38	Trust: 1.0
vendor:	netgear	model:	rax15	scope:	lt	version:	1.0.1.64	Trust: 1.0
vendor:	netgear	model:	rbk752	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	r6220	scope:	lt	version:	1.1.0.100	Trust: 1.0
vendor:	netgear	model:	rax35	scope:	lt	version:	1.0.3.80	Trust: 1.0
vendor:	netgear	model:	r6850	scope:	lt	version:	1.1.0.76	Trust: 1.0
vendor:	netgear	model:	r7450	scope:	lt	version:	1.2.0.72	Trust: 1.0
vendor:	netgear	model:	rbs840	scope:	lt	version:	3.2.16.6	Trust: 1.0
vendor:	netgear	model:	r7900p	scope:	lt	version:	1.4.1.62	Trust: 1.0
vendor:	netgear	model:	d8500	scope:	lt	version:	1.0.3.50	Trust: 1.0
vendor:	netgear	model:	r7000p	scope:	lt	version:	1.3.2.124	Trust: 1.0
vendor:	netgear	model:	rbr10	scope:	lt	version:	2.6.1.44	Trust: 1.0
vendor:	ネットギア	model:	d6000	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	ac2600	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	d7000v2	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	ac2400	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	d6220	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	d7800	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	ac2100	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	cbk40	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	d6400	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	cbr40	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2020-015016 // NVD: CVE-2020-35800

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-35800
value:	CRITICAL
Trust: 1.0
cve@mitre.org:	CVE-2020-35800
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2020-35800
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-202012-1740
value:	CRITICAL
Trust: 0.6

nvd@nist.gov:	CVE-2020-35800
severity:	HIGH
baseScore:	9.7
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	9.5
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8

nvd@nist.gov:	CVE-2020-35800
baseSeverity:	CRITICAL
baseScore:	9.4
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	LOW
exploitabilityScore:	3.9
impactScore:	5.5
version:	3.1
Trust: 2.0
OTHER:	JVNDB-2020-015016
baseSeverity:	CRITICAL
baseScore:	9.4
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	LOW
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2020-015016 // CNNVD: CNNVD-202012-1740 // NVD: CVE-2020-35800 // NVD: CVE-2020-35800

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD Evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2020-015016 // NVD: CVE-2020-35800

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202012-1740

TYPE

Default configuration problem

Trust: 0.6

sources: CNNVD: CNNVD-202012-1740

PATCH

title:	Security Advisory for Security Misconfiguration on Some Routers, Range Extenders, and Orbi WiFi Systems, PSV-2020-0112	url:	https://kb.netgear.com/000062733/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Range-Extenders-and-Orbi-WiFi-Systems-PSV-2020-0112	Trust: 0.8
title:	Certain NETGEAR devices Repair measures for default configuration problems	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=138265	Trust: 0.6

sources: JVNDB: JVNDB-2020-015016 // CNNVD: CNNVD-202012-1740

EXTERNAL IDS

db:	NVD	id:	CVE-2020-35800	Trust: 2.4
db:	JVNDB	id:	JVNDB-2020-015016	Trust: 0.8
db:	CNNVD	id:	CNNVD-202012-1740	Trust: 0.6

sources: JVNDB: JVNDB-2020-015016 // CNNVD: CNNVD-202012-1740 // NVD: CVE-2020-35800

REFERENCES

url:	https://kb.netgear.com/000062733/security-advisory-for-security-misconfiguration-on-some-routers-range-extenders-and-orbi-wifi-systems-psv-2020-0112	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2020-35800	Trust: 1.4

sources: JVNDB: JVNDB-2020-015016 // CNNVD: CNNVD-202012-1740 // NVD: CVE-2020-35800

SOURCES

db:	JVNDB	id:	JVNDB-2020-015016
db:	CNNVD	id:	CNNVD-202012-1740
db:	NVD	id:	CVE-2020-35800

LAST UPDATE DATE

2024-11-23T22:51:09.418000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2020-015016	date:	2021-09-07T09:06:00
db:	CNNVD	id:	CNNVD-202012-1740	date:	2021-01-12T00:00:00
db:	NVD	id:	CVE-2020-35800	date:	2024-11-21T05:28:08.620

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2020-015016	date:	2021-09-07T00:00:00
db:	CNNVD	id:	CNNVD-202012-1740	date:	2020-12-29T00:00:00
db:	NVD	id:	CVE-2020-35800	date:	2020-12-30T00:15:14.410