8.1

CVE-2019-20729

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNDR3000 before 1.0.0.22, R6250 before 1.0.4.26, R6300v2 before 1.0.4.22, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R6900P before 1.3.1.26, R7000P before 1.3.1.26, R7300DST before 1.0.0.62, R7900 before 1.0.2.16, R8000 before 1.0.4.18, R7900P before 1.4.1.42, R8000P before 1.4.1.42, R8300 before 1.0.2.116, R8500 before 1.0.2.116, WNDR3400v3 before 1.0.1.18, WNDR4500v2 before 1.0.0.68, and WNR3500Lv2 before 1.2.0.48.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
NetgearJndr3000 Firmware Version < 1.0.0.22
   NetgearJndr3000 Version-
NetgearR6250 Firmware Version < 1.0.4.26
   NetgearR6250 Version-
NetgearR6300 Firmware Version < 1.0.4.22
   NetgearR6300 Versionv2
NetgearR6400 Firmware Version < 1.0.1.36
   NetgearR6400 Version-
NetgearR6400 Firmware Version < 1.0.2.52
   NetgearR6400 Versionv2
NetgearR6700 Firmware Version < 1.0.1.44
   NetgearR6700 Version-
NetgearR6900 Firmware Version < 1.0.1.44
   NetgearR6900 Version-
NetgearR7000 Firmware Version < 1.0.9.28
   NetgearR7000 Version-
NetgearR6900p Firmware Version < 1.3.1.26
   NetgearR6900p Version-
NetgearR7000p Firmware Version < 1.3.1.26
   NetgearR7000p Version-
NetgearR7300dst Firmware Version < 1.0.0.62
   NetgearR7300dst Version-
NetgearR7900 Firmware Version < 1.0.2.16
   NetgearR7900 Version-
NetgearR8000 Firmware Version < 1.0.4.18
   NetgearR8000 Version-
NetgearR7900p Firmware Version < 1.4.1.42
   NetgearR7900p Version-
NetgearR8000p Firmware Version < 1.4.1.42
   NetgearR8000p Version-
NetgearR8300 Firmware Version < 1.0.2.116
   NetgearR8300 Version-
NetgearR8500 Firmware Version < 1.0.2.116
   NetgearR8500 Version-
NetgearWndr3400 Firmware Version < 1.0.1.18
   NetgearWndr3400 Versionv3
NetgearWndr4500 Firmware Version < 1.0.0.68
   NetgearWndr4500 Versionv2
NetgearWnr3500l Firmware Version < 1.2.0.48
   NetgearWnr3500l Versionv2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.349
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
cve@mitre.org 8.1 1.5 6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L