Lucene search

[email protected]CVE-2020-14426

HistoryJun 18, 2020 - 5:15 p.m.

CVE-2020-14426

2020-06-1817:15:11

[email protected]

web.nvd.nist.gov

netgear

cve-2020-14426

vulnerability

security

firmware

rbk752

rbk753

rbk753s

rbr750

rbs750

rbk852

rbk853

rbr850

rbs850

rbk842

rbr840

rbs840

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, RBK842 before 3.2.10.11, RBR840 before 3.2.10.11, and RBS840 before 3.2.10.11.

Affected configurations

NVD

Node

netgearrbk752Match-

AND

netgearrbk752_firmwareRange<3.2.15.25

Node

netgearrbk753Match-

AND

netgearrbk753_firmwareRange<3.2.15.25

Node

netgearrbk753sMatch-

AND

netgearrbk753s_firmwareRange<3.2.15.25

Node

netgearrbr750Match-

AND

netgearrbr750_firmwareRange<3.2.15.25

Node

netgearrbs750Match-

AND

netgearrbs750_firmwareRange<3.2.15.25

Node

netgearrbk852Match-

AND

netgearrbk852_firmwareRange<3.2.10.11

Node

netgearrbk853Match-

AND

netgearrbk853_firmwareRange<3.2.10.11

Node

netgearrbr850Match-

AND

netgearrbr850_firmwareRange<3.2.10.11

Node

netgearrbs850_firmwareRange<3.2.10.11

AND

netgearrbs850Match-

Node

netgearrbk842_firmwareRange<3.2.10.11

AND

netgearrbk842Match-

Node

netgearrbr840_firmwareRange<3.2.10.11

AND

netgearrbr840Match-

Node

netgearrbs840_firmwareRange<3.2.10.11

AND

netgearrbs840Match-

CPENameOperatorVersion
netgear:rbk752_firmwarenetgear rbk752 firmwarelt3.2.15.25

CPE	Name	Operator	Version
netgear:rbk752_firmware	netgear rbk752 firmware	lt	3.2.15.25

References

kb.netgear.com/000061931/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Wifi-Systems-PSV-2020-0033

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Related for CVE-2020-14426

nvd1 prion1 cvelist1