9.8

CVE-2020-35799

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6200 before 1.1.00.32, D7000 before 1.0.1.68, D7800 before 1.0.1.56, DM200 before 1.0.0.61, EX2700 before 1.0.1.52, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.74, EX6400 before 1.0.2.140, EX7300 before 1.0.2.140, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before 1.0.1.18, R6080 before 1.0.0.38, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6230 before 1.1.0.80, R6260 before 1.1.0.40, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, R7500v2 before 1.0.3.40, R7800 before 1.0.2.62, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, WN2000RPTv3 before 1.0.1.34, WN3000RPv2 before 1.0.0.78, WN3000RPv2 before 1.0.0.78, WN3000RPv3 before 1.0.2.78, WN3100RPv2 before 1.0.0.66, WNR2000v5 before 1.0.0.70, WNR2020 before 1.1.0.62, XR450 before 2.3.2.32, and XR500 before 2.3.2.32.

Data is provided by the National Vulnerability Database (NVD)
NetgearD3600 Firmware Version < 1.0.0.76
   NetgearD3600 Version-
NetgearD6000 Firmware Version < 1.0.078
   NetgearD6000 Version-
NetgearD6200 Firmware Version < 1.1.00.32
   NetgearD6200 Version-
NetgearD7000 Firmware Version < 1.0.1.68
   NetgearD7000 Version-
NetgearD7800 Firmware Version < 1.0.1.56
   NetgearD7800 Version-
NetgearDm200 Firmware Version < 1.0.0.61
   NetgearDm200 Version-
NetgearEx2700 Firmware Version < 1.0.1.52
   NetgearEx2700 Version-
NetgearEx6100v2 Firmware Version < 1.0.1.76
   NetgearEx6100v2 Version-
NetgearEx6150v2 Firmware Version < 1.0.1.76
   NetgearEx6150v2 Version-
NetgearEx6200v2 Firmware Version < 1.0.1.74
   NetgearEx6200v2 Version-
NetgearEx6400 Firmware Version < 1.0.2.140
   NetgearEx6400 Version-
NetgearEx7300 Firmware Version < 1.0.2.140
   NetgearEx7300 Version-
NetgearEx8000 Firmware Version < 1.0.1.186
   NetgearEx8000 Version-
NetgearJr6150 Firmware Version < 1.0.1.18
   NetgearJr6150 Version-
NetgearPr2000 Firmware Version < 1.0.0.28
   NetgearPr2000 Version-
NetgearR6020 Firmware Version < 1.0.0.38
   NetgearR6020 Version-
NetgearR6050 Firmware Version < 1.0.1.18
   NetgearR6050 Version-
NetgearR6080 Firmware Version < 1.0.0.38
   NetgearR6080 Version-
NetgearR6120 Firmware Version < 1.0.0.46
   NetgearR6120 Version-
NetgearR6220 Firmware Version < 1.1.0.80
   NetgearR6220 Version-
NetgearR6230 Firmware Version < 1.1.0.80
   NetgearR6230 Version-
NetgearR6260 Firmware Version < 1.1.0.40
   NetgearR6260 Version-
NetgearR6700v2 Firmware Version < 1.2.0.36
   NetgearR6700v2 Version-
NetgearR6800 Firmware Version < 1.2.0.36
   NetgearR6800 Version-
NetgearR6900v2 Firmware Version < 1.2.0.36
   NetgearR6900v2 Version-
NetgearR7500v2 Firmware Version < 1.0.3.40
   NetgearR7500v2 Version-
NetgearR7800 Firmware Version < 1.0.2.62
   NetgearR7800 Version-
NetgearR8900 Firmware Version < 1.0.4.12
   NetgearR8900 Version-
NetgearR9000 Firmware Version < 1.0.4.12
   NetgearR9000 Version-
NetgearRbk20 Firmware Version < 2.3.0.28
   NetgearRbk20 Version-
NetgearRbr20 Firmware Version < 2.3.0.28
   NetgearRbr20 Version-
NetgearRbs20 Firmware Version < 2.3.0.28
   NetgearRbs20 Version-
NetgearRbk40 Firmware Version < 2.3.0.28
   NetgearRbk40 Version-
NetgearRbr40 Firmware Version < 2.3.0.28
   NetgearRbr40 Version-
NetgearRbs40 Firmware Version < 2.3.0.28
   NetgearRbs40 Version-
NetgearRbk50 Firmware Version < 2.3.0.32
   NetgearRbk50 Version-
NetgearRbr50 Firmware Version < 2.3.0.32
   NetgearRbr50 Version-
NetgearRbs50 Firmware Version < 2.3.0.32
   NetgearRbs50 Version-
NetgearWn2000rptv3 Firmware Version < 1.0.1.34
   NetgearWn2000rptv3 Version-
NetgearWn3000rpv2 Firmware Version < 1.0.0.78
   NetgearWn3000rpv2 Version-
NetgearWn3000rpv2 Firmware Version < 1.0.0.78
   NetgearWn3000rpv2 Version-
NetgearWn3000rpv3 Firmware Version < 1.0.2.78
   NetgearWn3000rpv3 Version-
NetgearWn3100rpv2 Firmware Version < 1.0.0.66
   NetgearWn3100rpv2 Version-
NetgearWnr2000v5 Firmware Version < 1.0.0.70
   NetgearWnr2000v5 Version-
NetgearWnr2020 Firmware Version < 1.1.0.62
   NetgearWnr2020 Version-
NetgearXr450 Firmware Version2.3.2.32
   NetgearXr450 Version-
NetgearXr500 Firmware Version2.3.2.32
   NetgearXr500 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.23% 0.773
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
cve@mitre.org 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.