Lucene search

[email protected]CVE-2020-35802

HistoryDec 30, 2020 - 12:15 a.m.

CVE-2020-35802

2020-12-3000:15:14

[email protected]

web.nvd.nist.gov

cve-2020-35802

netgear

disclosure

sensitive information

security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 before 2.6.1.4, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RBK842 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, and RBS40V before 2.6.1.4.

Affected configurations

NVD

Node

netgearcbr40_firmwareRange<2.5.0.14

AND

netgearcbr40Match-

Node

netgearrbw30_firmwareRange<2.6.1.4

AND

netgearrbw30Match-

Node

netgearrax75_firmwareRange<1.0.3.102

AND

netgearrax75Match-

Node

netgearrax80_firmwareRange<1.0.3.102

AND

netgearrax80Match-

Node

netgearrbk752_firmwareRange<3.2.16.6

AND

netgearrbk752Match-

Node

netgearrbr750_firmwareRange<3.2.16.6

AND

netgearrbr750Match-

Node

netgearrbs750_firmwareRange<3.2.16.6

AND

netgearrbs750Match-

Node

netgearrbk852_firmwareRange<3.2.16.6

AND

netgearrbk852Match-

Node

netgearrbr850_firmwareRange<3.2.16.6

AND

netgearrbr850Match-

Node

netgearrbs850_firmwareRange<3.2.16.6

AND

netgearrbs850Match-

Node

netgearrbk842_firmwareRange<3.2.16.6

AND

netgearrbk842Match-

Node

netgearrbr840_firmwareRange<3.2.16.6

AND

netgearrbr840Match-

Node

netgearrbs840_firmwareRange<3.2.16.6

AND

netgearrbs840Match-

Node

netgearrbs840v_firmwareRange<2.6.1.4

AND

netgearrbs840vMatch-

CPENameOperatorVersion
netgear:cbr40_firmwarenetgear cbr40 firmwarelt2.5.0.14

CPE	Name	Operator	Version
netgear:cbr40_firmware	netgear cbr40 firmware	lt	2.5.0.14

References

kb.netgear.com/000062720/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-and-WiFi-Systems-PSV-2020-0331

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

Related for CVE-2020-35802

prion1 cvelist1 nvd1