CVE-2020-26897

Certain NETGEAR devices are affected by disclosure of administrative credentials

Critical · published October 9, 2020

CVSS v3.1
9.6
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

🚨 Certain NETGEAR devices are giving away the keys to the kingdom! An easily accessible disclosure of administrative credentials affects multiple models—how scary is that? 🔥 This is like leaving your front door wide open with a sign inviting anyone to come in and play with the valuables inside. With the wrong person knowing the admin credentials, it’s a recipe for disaster! An attacker could easily gain full control over your network, snooping on data, changing settings, or even locking you out entirely! This could lead to unauthorized access to sensitive information and could severely compromise your entire home or office network. Absolutely devastating!

Put simply

This is like leaving your front door wide open with a sign inviting anyone to come in and play with the valuables inside. With the wrong person knowing the admin credentials, it’s a recipe for disaster! This vulnerability allows unauthorized access to administrative credentials on certain NETGEAR devices, making it possible for attackers to exploit these credentials and take control of the device without proper authentication.

What to do

An attacker could easily gain full control over your network, snooping on data, changing settings, or even locking you out entirely! This could lead to unauthorized access to sensitive information and could severely compromise your entire home or office network. Absolutely devastating! Immediately update your NETGEAR devices to firmware version 2.5.0.10 or later for CBR40, and 3.2.15.25 or later for RBK752, RBR750, RBS750. If you have an RBK852, RBR850, or RBS850, make sure to update to version 3.2.10.11. Don't forget to check your settings and change any default credentials! You’ve got this! Follow these steps, and you’ll have your network more secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00613 · 48.7th percentile
Published
2020-10-09T06:34Z
EPSS history
Timeline
  • 09 OCT 06:34Z
    Certain NETGEAR devices are affected by disclosure of administrative credentials
    cvelistv5