9.8

CVE-2020-35795

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D7800 before 1.0.1.58, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX7500 before 1.0.0.68, MK62 before 1.0.5.102, MR60 before 1.0.5.102, MS60 before 1.0.5.102, R6120 before 1.0.0.70, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6330 before 1.1.0.76, R6350 before 1.1.0.76, R6400 before 1.0.1.62, R6400v2 before 1.0.4.98, R6700 before 1.0.2.16, R6700v2 before 1.2.0.72, R6700v3 before 1.0.4.98, R6800 before 1.2.0.72, R6850 before 1.1.0.76, R6900P before 1.3.2.124, R6900 before 1.0.2.16, R6900v2 before 1.2.0.72, R7000 before 1.0.11.106, R7000P before 1.3.2.124, R7200 before 1.2.0.72, R7350 before 1.2.0.72, R7400 before 1.2.0.72, R7450 before 1.2.0.72, R7800 before 1.0.2.74, R7850 before 1.0.5.60, R7900 before 1.0.4.26, R7900P before 1.4.1.62, R7960P before 1.4.1.62, R8000 before 1.0.4.58, R8000P before 1.4.1.62, R8900 before 1.0.5.24, R9000 before 1.0.5.24, RAX120 before 1.0.1.136, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX200 before 1.0.2.102, RAX45 before 1.0.2.64, RAX50 before 1.0.2.64, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK12 before 2.6.1.44, RBR10 before 2.6.1.44, RBS10 before 2.6.1.44, RBK20 before 2.6.1.38, RBR20 before 2.6.1.36, RBS20 before 2.6.1.38, RBK40 before 2.6.1.38, RBR40 before 2.6.1.36, RBS40 before 2.6.1.38, RBK50 before 2.6.1.40, RBR50 before 2.6.1.40, RBS50 before 2.6.1.40, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK842 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RS400 before 1.5.0.48, XR300 before 1.0.3.50, XR450 before 2.3.2.66, XR500 before 2.3.2.66, and XR700 before 1.0.1.34.

Data is provided by the National Vulnerability Database (NVD)
NetgearAc2100 Firmware Version < 1.2.0.72
   NetgearAc2100 Version-
NetgearAc2400 Firmware Version < 1.2.0.72
   NetgearAc2400 Version-
NetgearAc2600 Firmware Version < 1.2.0.72
   NetgearAc2600 Version-
NetgearCbk40 Firmware Version < 2.5.0.10
   NetgearCbk40 Version-
NetgearCbr40 Firmware Version < 2.5.0.10
   NetgearCbr40 Version-
NetgearD7800 Firmware Version < 1.0.1.58
   NetgearD7800 Version-
NetgearEax20 Firmware Version < 1.0.0.36
   NetgearEax20 Version-
NetgearEax80 Firmware Version < 1.0.1.62
   NetgearEax80 Version-
NetgearEx7500 Firmware Version < 1.0.0.68
   NetgearEx7500 Version-
NetgearMk62 Firmware Version < 1.0.5.102
   NetgearMk62 Version-
NetgearMr60 Firmware Version < 1.0.5.102
   NetgearMr60 Version-
NetgearMs60 Firmware Version < 1.0.5.102
   NetgearMs60 Version-
NetgearR6120 Firmware Version < 1.0.0.70
   NetgearR6120 Version-
NetgearR6220 Firmware Version < 1.1.0.100
   NetgearR6220 Version-
NetgearR6230 Firmware Version < 1.1.0.100
   NetgearR6230 Version-
NetgearR6260 Firmware Version < 1.1.0.76
   NetgearR6260 Version-
NetgearR6330 Firmware Version < 1.1.0.76
   NetgearR6330 Version-
NetgearR6350 Firmware Version < 1.1.0.76
   NetgearR6350 Version-
NetgearR6400 Firmware Version < 1.0.1.62
   NetgearR6400 Version-
NetgearR6400v2 Firmware Version < 1.0.4.98
   NetgearR6400v2 Version-
NetgearR6700 Firmware Version < 1.0.2.16
   NetgearR6700 Version-
NetgearR6700v2 Firmware Version < 1.2.0.72
   NetgearR6700v2 Version-
NetgearR6700v3 Firmware Version < 1.0.4.98
   NetgearR6700v3 Version-
NetgearR6800 Firmware Version < 1.2.0.72
   NetgearR6800 Version-
NetgearR6850 Firmware Version < 1.1.0.76
   NetgearR6850 Version-
NetgearR6900p Firmware Version < 1.3.2.124
   NetgearR6900p Version-
NetgearR6900 Firmware Version < 1.0.2.16
   NetgearR6900 Version-
NetgearR6900v2 Firmware Version < 1.2.0.72
   NetgearR6900v2 Version-
NetgearR7000 Firmware Version < 1.0.11.106
   NetgearR7000 Version-
NetgearR7000p Firmware Version < 1.3.2.124
   NetgearR7000p Version-
NetgearR7200 Firmware Version < 1.2.0.72
   NetgearR7200 Version-
NetgearR7350 Firmware Version < 1.2.0.72
   NetgearR7350 Version-
NetgearR7400 Firmware Version < 1.2.0.72
   NetgearR7400 Version-
NetgearR7450 Firmware Version < 1.2.0.72
   NetgearR7450 Version-
NetgearR7800 Firmware Version < 1.0.2.74
   NetgearR7800 Version-
NetgearR7850 Firmware Version < 1.0.5.60
   NetgearR7850 Version-
NetgearR7900 Firmware Version < 1.0.4.26
   NetgearR7900 Version-
NetgearR7900p Firmware Version < 1.4.1.62
   NetgearR7900p Version-
NetgearR7960p Firmware Version < 1.4.1.62
   NetgearR7960p Version-
NetgearR8000 Firmware Version < 1.0.4.58
   NetgearR8000 Version-
NetgearR8000p Firmware Version < 1.4.1.62
   NetgearR8000p Version-
NetgearR8900 Firmware Version < 1.0.5.24
   NetgearR8900 Version-
NetgearR9000 Firmware Version < 1.0.5.24
   NetgearR9000 Version-
NetgearRax120 Firmware Version < 1.0.1.136
   NetgearRax120 Version-
NetgearRax15 Firmware Version < 1.0.1.64
   NetgearRax15 Version-
NetgearRax20 Firmware Version < 1.0.1.64
   NetgearRax20 Version-
NetgearRax200 Firmware Version < 1.0.2.102
   NetgearRax200 Version-
NetgearRax45 Firmware Version < 1.0.2.64
   NetgearRax45 Version-
NetgearRax50 Firmware Version < 1.0.2.64
   NetgearRax50 Version-
NetgearRax75 Firmware Version < 1.0.3.102
   NetgearRax75 Version-
NetgearRax80 Firmware Version < 1.0.3.102
   NetgearRax80 Version-
NetgearRbk12 Firmware Version < 2.6.1.44
   NetgearRbk12 Version-
NetgearRbr10 Firmware Version < 2.6.1.44
   NetgearRbr10 Version-
NetgearRbs10 Firmware Version < 2.6.1.44
   NetgearRbs10 Version-
NetgearRbk20 Firmware Version < 2.6.1.38
   NetgearRbk20 Version-
NetgearRbr20 Firmware Version < 2.6.1.36
   NetgearRbr20 Version-
NetgearRbs20 Firmware Version < 2.6.1.38
   NetgearRbs20 Version-
NetgearRbk40 Firmware Version < 2.6.1.38
   NetgearRbk40 Version-
NetgearRbr40 Firmware Version < 2.6.1.36
   NetgearRbr40 Version-
NetgearRbs40 Firmware Version < 2.6.1.38
   NetgearRbs40 Version-
NetgearRbk50 Firmware Version < 2.6.1.40
   NetgearRbk50 Version-
NetgearRbr50 Firmware Version < 2.6.1.40
   NetgearRbr50 Version-
NetgearRbs50 Firmware Version < 2.6.1.40
   NetgearRbs50 Version-
NetgearRbk752 Firmware Version < 3.2.16.6
   NetgearRbk752 Version-
NetgearRbr750 Firmware Version < 3.2.16.6
   NetgearRbr750 Version-
NetgearRbs750 Firmware Version < 3.2.16.6
   NetgearRbs750 Version-
NetgearRbk842 Firmware Version < 3.2.16.6
   NetgearRbk842 Version-
NetgearRbr840 Firmware Version < 3.2.16.6
   NetgearRbr840 Version-
NetgearRbs840 Firmware Version < 3.2.16.6
   NetgearRbs840 Version-
NetgearRbk852 Firmware Version < 3.2.16.6
   NetgearRbk852 Version-
NetgearRbr850 Firmware Version < 3.2.16.6
   NetgearRbr850 Version-
NetgearRbs850 Firmware Version < 3.2.16.6
   NetgearRbs850 Version-
NetgearRs400 Firmware Version < 1.5.0.48
   NetgearRs400 Version-
NetgearXr300 Firmware Version < 1.0.3.50
   NetgearXr300 Version-
NetgearXr450 Firmware Version < 2.3.2.66
   NetgearXr450 Version-
NetgearXr500 Firmware Version < 2.3.2.66
   NetgearXr500 Version-
NetgearXr700 Firmware Version < 1.0.1.34
   NetgearXr700 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.56% 0.655
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
cve@mitre.org 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.