Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V1.0.0.100, V1.0.0.72, V1.0.0.54, V1.1.7.132, V1.0.3.28, and 10 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- NETGEAR EX3700
fixed in V1.0.0.100
- NETGEAR EX3800
fixed in V1.0.0.100
- NETGEAR EX6120
fixed in V1.0.0.72
- NETGEAR EX6130
fixed in V1.0.0.54
- NETGEAR MR60
fixed in V1.1.7.132
- NETGEAR MR70
fixed in V1.0.3.28
- NETGEAR MR80
fixed in V1.1.7.14
- NETGEAR MS60
fixed in V1.1.7.132
- NETGEAR MS70
fixed in V1.0.3.28
- NETGEAR MS80
fixed in V1.1.7.14
- NETGEAR R6400v2
fixed in V1.0.4.128
- NETGEAR R6700v3
fixed in V1.0.4.128
- NETGEAR R6900P
fixed in V1.3.3.152
- NETGEAR R7000
fixed in V1.0.11.216
- NETGEAR R7000P
fixed in V1.3.3.152
- NETGEAR R7960P
fixed in V1.4.4.92
- NETGEAR R8000P
fixed in V1.4.4.92
- NETGEAR R8500
through 1.0.2.160
- NETGEAR RAX20
fixed in V1.0.18.144
- NETGEAR RAX35v2
fixed in V1.0.12.118
- NETGEAR RAX40v2
fixed in V1.0.12.118
- NETGEAR RAX41
fixed in V1.0.12.118
- NETGEAR RAX42
fixed in V1.0.12.118
- NETGEAR RAX43
fixed in V1.0.12.120
- NETGEAR RAX45
fixed in V1.0.12.118
- NETGEAR RAX48
fixed in V1.0.12.118
- NETGEAR RAX50
fixed in V1.0.12.120
- NETGEAR RAX50S
fixed in V1.0.12.120
- NETGEAR RAXE450
fixed in V1.0.10.86
- NETGEAR RAXE500
fixed in V1.0.10.86
- NETGEAR XR1000
fixed in V1.0.0.68
References 25
netgear.com
- support/product/ex3700
- support/product/ex3800
- support/product/ex6120
- support/product/mr60
- support/product/ex6130
- support/product/ms70
- support/product/ms60
- support/product/mr80
- support/product/ms80
- support/product/mr70
- support/product/r6400v2
- support/product/r6700v3
- support/product/r6900p
- support/product/r7960p
- support/product/r7000p
- support/product/r8000p
- support/product/r8500
- support/product/rax48
- support/product/r7000
- support/product/rax40v2
- support/product/rax20
- support/product/rax35v2
- support/product/rax41
- support/product/rax42
- support/product/rax45