CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2020-26908

CVSS 9.4v3.1pub. 2020-10-09upd. 2024-11-21

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before 1.0.0.42, R6050 before 1.0.1.22, JR6150 before 1.0.1.22, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R69002 before 1.2.0.62, and WNR2020 before 1.1.0.62.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

  • Netgear D6200

    HW
    Netgear
    all versions

  • Netgear D6200 Firmware

    OS
    Netgear
    < 1.1.00.36

  • Netgear D7000

    HW
    Netgear
    all versions

  • Netgear D7000 Firmware

    OS
    Netgear
    < 1.0.1.74

  • Netgear Jr6150

    HW
    Netgear
    all versions

  • Netgear Jr6150 Firmware

    OS
    Netgear
    < 1.0.1.22

  • Netgear Pr2000

    HW
    Netgear
    all versions

  • Netgear Pr2000 Firmware

    OS
    Netgear
    < 1.0.0.30

  • Netgear R6020

    HW
    Netgear
    all versions

  • Netgear R6020 Firmware

    OS
    Netgear
    < 1.0.0.42

  • Netgear R6050

    HW
    Netgear
    all versions

  • Netgear R6050 Firmware

    OS
    Netgear
    < 1.0.1.22

  • Netgear R6080

    HW
    Netgear
    all versions

  • Netgear R6080 Firmware

    OS
    Netgear
    < 1.0.0.42

  • Netgear R6120

    HW
    Netgear
    all versions

  • Netgear R6120 Firmware

    OS
    Netgear
    < 1.0.0.66

  • Netgear R6220

    HW
    Netgear
    all versions

  • Netgear R6220 Firmware

    OS
    Netgear
    < 1.1.0.100

  • Netgear R6230

    HW
    Netgear
    all versions

  • Netgear R6230 Firmware

    OS
    Netgear
    < 1.1.0.100

  • Netgear R6260

    HW
    Netgear
    all versions

  • Netgear R6260 Firmware

    OS
    Netgear
    < 1.1.0.64

  • Netgear R6700v2

    HW
    Netgear
    all versions

  • Netgear R6700v2 Firmware

    OS
    Netgear
    < 1.2.0.62

  • Netgear R6800

    HW
    Netgear
    all versions

  • Netgear R6800 Firmware

    OS
    Netgear
    < 1.2.0.62

  • Netgear R6900

    HW
    Netgear
    all versions

  • Netgear R6900 Firmware

    OS
    Netgear
    < 1.2.0.62

  • Netgear Wnr2020

    HW
    Netgear
    all versions

  • Netgear Wnr2020 Firmware

    OS
    Netgear
    < 1.1.0.62
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2016-10174CRITICAL9.8⚠ KEVPL ✓same product

Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia

CVE-2023-30280CRITICAL9.8PL ✓same product

Buffer Overflow w routerach Netgear R6900/R6700 — zdalne wykonanie kodu

CVE-2021-45496CRITICAL9.1PL ✓same product

Authentication Bypass w urządzeniach NETGEAR D7000

CVE-2021-45497CRITICAL9.4PL ✓same product

Authentication Bypass w urządzeniach NETGEAR D7000

CVE-2021-45501CRITICAL9.4PL ✓same product

Authentication Bypass w urządzeniach NETGEAR — wiele modeli routerów