10

CVE-2020-35796

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX3920 before 1.0.0.84, EX6000 before 1.0.0.44, EX6100 before 1.0.2.28, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX6150 before 1.0.0.46, EX6200 before 1.0.3.94, EX6920 before 1.0.0.54, EX7000 before 1.0.1.90, EX7500 before 1.0.0.68, MK62 before 1.0.5.102, MR60 before 1.0.5.102, MS60 before 1.0.5.102, R6250 before 1.0.4.42, R6300v2 before 1.0.4.42, R6400 before 1.0.1.62, R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R6700 before 1.0.2.16, R6900P before 1.3.2.124, R6900 before 1.0.2.16, R7000 before 1.0.11.106, R7000P before 1.3.2.124, R7100LG before 1.0.0.56, R7850 before 1.0.5.60, R7900 before 1.0.4.26, R7900P before 1.4.1.62, R7960P before 1.4.1.62, R8000 before 1.0.4.58, R8000P before 1.4.1.62, R8300 before 1.0.2.134, R8500 before 1.0.2.134, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX200 before 1.0.2.102, RAX45 before 1.0.2.32, RAX50 before 1.0.2.32, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK842 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RBS40V-200 before 1.0.0.46, RBW30 before 2.5.0.4, RS400 before 1.5.0.48, WN2500RPv2 before 1.0.1.56, WN3500RP before 1.0.0.28, WNDR3400v3 before 1.0.1.32, WNR1000v3 before 1.0.2.78, WNR2000v2 before 1.2.0.12, WNR3500Lv2 before 1.2.0.62, and XR300 before 1.0.3.50.

Data is provided by the National Vulnerability Database (NVD)
NetgearCbr40 Firmware Version < 2.5.0.10
   NetgearCbr40 Version-
NetgearD6220 Firmware Version < 1.0.0.60
   NetgearD6220 Version-
NetgearD6400 Firmware Version < 1.0.0.94
   NetgearD6400 Version-
NetgearD7000v2 Firmware Version < 1.0.0.62
   NetgearD7000v2 Version-
NetgearD8500 Firmware Version < 1.0.3.50
   NetgearD8500 Version-
NetgearDc112a Firmware Version < 1.0.0.48
   NetgearDc112a Version-
NetgearDgn2200v4 Firmware Version < 1.0.0.114
   NetgearDgn2200v4 Version-
NetgearEax20 Firmware Version < 1.0.0.36
   NetgearEax20 Version-
NetgearEax80 Firmware Version < 1.0.1.62
   NetgearEax80 Version-
NetgearEx3700 Firmware Version < 1.0.0.84
   NetgearEx3700 Version-
NetgearEx3800 Firmware Version < 1.0.0.84
   NetgearEx3800 Version-
NetgearEx3920 Firmware Version < 1.0.0.84
   NetgearEx3920 Version-
NetgearEx6000 Firmware Version < 1.0.0.44
   NetgearEx6000 Version-
NetgearEx6100 Firmware Version < 1.0.2.28
   NetgearEx6100 Version-
NetgearEx6120 Firmware Version < 1.0.0.54
   NetgearEx6120 Version-
NetgearEx6130 Firmware Version < 1.0.0.36
   NetgearEx6130 Version-
NetgearEx6150 Firmware Version < 1.0.0.46
   NetgearEx6150 Version-
NetgearEx6200 Firmware Version < 1.0.3.94
   NetgearEx6200 Version-
NetgearEx6920 Firmware Version < 1.0.0.54
   NetgearEx6920 Version-
NetgearEx7000 Firmware Version < 1.0.1.90
   NetgearEx7000 Version-
NetgearEx7500 Firmware Version < 1.0.0.68
   NetgearEx7500 Version-
NetgearMk62 Firmware Version < 1.0.5.102
   NetgearMk62 Version-
NetgearMr60 Firmware Version < 1.0.5.102
   NetgearMr60 Version-
NetgearMs60 Firmware Version < 1.0.5.102
   NetgearMs60 Version-
NetgearR6250 Firmware Version < 1.0.4.42
   NetgearR6250 Version-
NetgearR6300v2 Firmware Version < 1.0.4.42
   NetgearR6300v2 Version-
NetgearR6400 Firmware Version < 1.0.1.62
   NetgearR6400 Version-
NetgearR6400v2 Firmware Version < 1.0.4.98
   NetgearR6400v2 Version-
NetgearR6700v3 Firmware Version < 1.0.4.98
   NetgearR6700v3 Version-
NetgearR6700 Firmware Version < 1.0.2.16
   NetgearR6700 Version-
NetgearR6900p Firmware Version < 1.3.2.124
   NetgearR6900p Version-
NetgearR6900 Firmware Version < 1.0.2.16
   NetgearR6900 Version-
NetgearR7000 Firmware Version < 1.0.11.106
   NetgearR7000 Version-
NetgearR7000p Firmware Version < 1.3.2.124
   NetgearR7000p Version-
NetgearR7100lg Firmware Version < 1.0.0.56
   NetgearR7100lg Version-
NetgearR7850 Firmware Version < 1.0.5.60
   NetgearR7850 Version-
NetgearR7900 Firmware Version < 1.0.4.26
   NetgearR7900 Version-
NetgearR7900p Firmware Version < 1.4.1.62
   NetgearR7900p Version-
NetgearR7960p Firmware Version < 1.4.1.62
   NetgearR7960p Version-
NetgearR8000 Firmware Version < 1.0.4.58
   NetgearR8000 Version-
NetgearR8000p Firmware Version < 1.4.1.62
   NetgearR8000p Version-
NetgearR8300 Firmware Version < 1.0.2.134
   NetgearR8300 Version-
NetgearR8500 Firmware Version < 1.0.2.134
   NetgearR8500 Version-
NetgearRax15 Firmware Version < 1.0.1.64
   NetgearRax15 Version-
NetgearRax20 Firmware Version < 1.0.1.64
   NetgearRax20 Version-
NetgearRax200 Firmware Version < 1.0.2.102
   NetgearRax200 Version-
NetgearRx45 Firmware Version < 1.0.2.32
   NetgearRx45 Version-
NetgearRax50 Firmware Version < 1.0.2.32
   NetgearRax50 Version-
NetgearRax75 Firmware Version < 1.0.3.102
   NetgearRax75 Version-
NetgearRax80 Firmware Version < 1.0.3.102
   NetgearRax80 Version-
NetgearRbk752 Firmware Version < 3.2.16.6
   NetgearRbk752 Version-
NetgearRbr750 Firmware Version < 3.2.16.6
   NetgearRbr750 Version-
NetgearRbs750 Firmware Version < 3.2.16.6
   NetgearRbs750 Version-
NetgearRbk842 Firmware Version < 3.2.16.6
   NetgearRbk842 Version-
NetgearRbr840 Firmware Version < 3.2.16.6
   NetgearRbr840 Version-
NetgearRbs840 Firmware Version < 3.2.16.6
   NetgearRbs840 Version-
NetgearRbk852 Firmware Version < 3.2.16.6
   NetgearRbk852 Version-
NetgearRbr850 Firmware Version < 3.2.16.6
   NetgearRbr850 Version-
NetgearRbs850 Firmware Version < 3.2.16.6
   NetgearRbs850 Version-
NetgearRbs40v-200 Firmware Version < 1.0.0.46
   NetgearRbs40v-200 Version-
NetgearRbw30 Firmware Version < 2.5.0.4
   NetgearRbw30 Version-
NetgearRs400 Firmware Version < 1.5.0.48
   NetgearRs400 Version-
NetgearWn2500rpv2 Firmware Version < 1.0.1.56
   NetgearWn2500rpv2 Version-
NetgearWn3500rp Firmware Version < 1.0.0.28
   NetgearWn3500rp Version-
NetgearWndr3400v3 Firmware Version < 1.0.1.32
   NetgearWndr3400v3 Version-
NetgearWnr1000v3 Firmware Version < 1.0.2.78
   NetgearWnr1000v3 Version-
NetgearWnr2000v2 Firmware Version < 1.2.0.12
   NetgearWnr2000v2 Version-
NetgearWnr3500lv2 Firmware Version < 1.2.0.62
   NetgearWnr3500lv2 Version-
NetgearXr300 Firmware Version < 1.0.3.50
   NetgearXr300 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.4% 0.786
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
cve@mitre.org 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.