CVE-2020-26899

Certain NETGEAR devices are affected by disclosure of sensitive information

Critical · published October 9, 2020

CVSS v3.1
9.6
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

🔥 Sensitive info just waiting to be disclosed! Certain NETGEAR devices have a vulnerability that could let unauthorized users access valuable data. ⚡️ Think of it as leaving the back door of your house wide open while you’re at work — anyone could just stroll in and take a look around without you even knowing! If exploited, this could lead to the unauthorized disclosure of sensitive information, potentially compromising your network security. Attackers could glean critical details about your device configuration and user settings, putting your entire setup at risk. Protecting your personal data should definitely be a top priority!

Put simply

Think of it as leaving the back door of your house wide open while you’re at work — anyone could just stroll in and take a look around without you even knowing! This vulnerability allows unauthorized access to sensitive information on NETGEAR devices due to improper handling of certain requests. Specifically, it affects CBR40 versions prior to 2.5.0.10, RBK752, RBR750, RBS750 before 3.2.15.25, and RBK852, RBR850, RBS850 before 3.2.10.11.

What to do

If exploited, this could lead to the unauthorized disclosure of sensitive information, potentially compromising your network security. Attackers could glean critical details about your device configuration and user settings, putting your entire setup at risk. Protecting your personal data should definitely be a top priority! To mitigate this risk, update your NETGEAR devices to the latest firmware versions: CBR40 to 2.5.0.10 or higher, RBK752, RBR750, RBS750 to 3.2.15.25 or higher, and RBK852, RBR850, RBS850 to 3.2.10.11 or higher. Don't forget to regularly check for firmware updates to stay secure! You've got this! Patch your devices now and keep that digital fortress secure! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00768 · 55.1th percentile
Published
2020-10-09T06:34Z
EPSS history
Timeline
  • 09 OCT 06:34Z
    Certain NETGEAR devices are affected by disclosure of sensitive information
    cvelistv5