Certain NETGEAR devices allow administrators to tamper with system
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in v4.6.14.4, V1.1.7.128, V1.0.3.28, V1.1.7.6, V1.0.11.112, and 5 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- NETGEAR CBR750
fixed in v4.6.14.4
- NETGEAR EX6120
through 1.0.0.72
- NETGEAR EX6130
through 1.0.0.54
- NETGEAR MR60
fixed in V1.1.7.128
- NETGEAR MR70
fixed in V1.0.3.28
- NETGEAR MR80
fixed in V1.1.7.6
- NETGEAR MS60
fixed in V1.1.7.128
- NETGEAR MS70
fixed in V1.0.3.28
- NETGEAR MS80
fixed in V1.1.7.6
- NETGEAR RAX15
through 1.0.18.144
- NETGEAR RAX20
through 1.0.18.144
- NETGEAR RAX200
through 1.0.11.148
- NETGEAR RAX35v2
fixed in V1.0.11.112
- NETGEAR RAX38v2
fixed in V1.0.11.112
- NETGEAR RAX40v2
fixed in V1.0.11.112
- NETGEAR RAX42
fixed in V1.0.11.112
- NETGEAR RAX43
fixed in V1.0.11.112
- NETGEAR RAX45
fixed in V1.0.11.112
- NETGEAR RAX48
fixed in V1.0.11.112
- NETGEAR RAX50
fixed in V1.0.11.112
- NETGEAR RAX50S
fixed in V1.0.11.112
- NETGEAR RAX75
through 1.0.11.148
- NETGEAR RAX80
through 1.0.11.148
- NETGEAR RAXE450
fixed in V1.0.10.86
- NETGEAR RAXE500
fixed in V1.0.10.86
- NETGEAR RBR750
fixed in V4.6.14.3
- NETGEAR RBR840
fixed in V4.6.14.3
- NETGEAR RBR850
fixed in V4.6.14.3
- NETGEAR RBRE960
fixed in V6.3.7.5
- NETGEAR RBS750
fixed in V4.6.14.3
- NETGEAR RBS840
fixed in V4.6.14.3
- NETGEAR RBS850
fixed in V4.6.14.3
- NETGEAR RBSE960
fixed in V6.3.7.5
- NETGEAR RS700
fixed in V1.0.7.66
- NETGEAR XR1000
fixed in v1.0.0.68
References 25
netgear.com
- support/product/cbr750
- support/product/rax15
- support/product/ex6120
- support/product/rax200
- support/product/rax38v2
- support/product/rax75
- support/product/mr60
- support/product/rax80
- support/product/rbr840
- support/product/rbr750
- support/product/rbs750
- support/product/ex6130
- support/product/rbr850
- support/product/rbs840
- support/product/rbs850
- support/product/ms60
- support/product/rs700
- support/product/mr70
- support/product/mr80
- support/product/ms70
- support/product/rax35v2
- support/product/rax20
- support/product/ms80
- support/product/rax40v2
- support/product/rax42