Lucene search

[email protected]CVE-2020-14428

HistoryJun 18, 2020 - 5:15 p.m.

CVE-2020-14428

2020-06-1817:15:12

[email protected]

web.nvd.nist.gov

cve-2020-14428

netgear

administrative credentials

rbk752

rbk753

rbr750

rbs750

rbk842

rbr840

rbs840

rbk852

rbk853

rbr850

rbs850

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Affected configurations

NVD

Node

netgearrbk752Match-

AND

netgearrbk752_firmwareRange<3.2.15.25

Node

netgearrbk753Match-

AND

netgearrbk753_firmwareRange<3.2.15.25

Node

netgearrbk753sMatch-

AND

netgearrbk753s_firmwareRange<3.2.15.25

Node

netgearrbr750Match-

AND

netgearrbr750_firmwareRange<3.2.15.25

Node

netgearrbs750Match-

AND

netgearrbs750_firmwareRange<3.2.15.25

Node

netgearrbk842Match-

AND

netgearrbk842_firmwareRange<3.2.15.25

Node

netgearrbr840Match-

AND

netgearrbr840_firmwareRange<3.2.15.25

Node

netgearrbs840Match-

AND

netgearrbs840_firmwareRange<3.2.15.25

Node

netgearrbk852_firmwareRange<3.2.15.25

AND

netgearrbk852Match-

Node

netgearrbk853_firmwareRange<3.2.15.25

AND

netgearrbk853Match-

Node

netgearrbr850_firmwareRange<3.2.15.25

AND

netgearrbr850Match-

Node

netgearrbs850_firmwareRange<3.2.15.25

AND

netgearrbs850Match-

CPENameOperatorVersion
netgear:rbk752_firmwarenetgear rbk752 firmwarelt3.2.15.25

CPE	Name	Operator	Version
netgear:rbk752_firmware	netgear rbk752 firmware	lt	3.2.15.25

References

kb.netgear.com/000061936/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0044

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Related for CVE-2020-14428

prion1 cvelist1 nvd1