CVE-2020-26903

Certain NETGEAR devices are affected by disclosure of administrative credentials

Critical · published October 9, 2020

CVSS v3.1
9.6
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

🚨 Certain NETGEAR devices are letting sensitive admin credentials slip out like secrets at a party! 🤐 Think of it as leaving a window open during a rainstorm—anyone nearby can peek in and see what's inside your home. In this case, the admin credentials are the valuables that attackers can snatch without even breaking a sweat! An attacker could potentially access your network and control your device, leading to unauthorized changes, data theft, or even a full network takeover. This is absolutely devastating for both your personal data and your network security! 🔥

Put simply

Think of it as leaving a window open during a rainstorm—anyone nearby can peek in and see what's inside your home. In this case, the admin credentials are the valuables that attackers can snatch without even breaking a sweat! This vulnerability allows attackers to disclose administrative credentials on devices running specific firmware versions, making them susceptible to tampering and exploitation. NETGEAR firmware before 2.5.0.10 for CBR40 and versions before 3.2.15.25 and 3.2.10.11 for several RBK and RBS models are affected.

What to do

An attacker could potentially access your network and control your device, leading to unauthorized changes, data theft, or even a full network takeover. This is absolutely devastating for both your personal data and your network security! 🔥 Upgrade your NETGEAR devices to the latest firmware versions as follows: 2.5.0.10 for CBR40, 3.2.15.25 for RBK752, RBR750, RBS750 and 3.2.10.11 for RBK852, RBR850, RBS850. Don’t wait—this critical update will protect your network from potential intruders! You've got this! Secure your devices and keep those intruders at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00520 · 43.3th percentile
Published
2020-10-09T06:33Z
EPSS history
Timeline
  • 09 OCT 06:33Z
    Certain NETGEAR devices are affected by disclosure of administrative credentials
    cvelistv5