CVE-2020-26905

Certain NETGEAR devices are affected by disclosure of administrative credentials

Critical · published October 9, 2020

CVSS v3.1
9.6
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

🚨 An attacker could gain access to your NETGEAR admin credentials without breaking a sweat! 🔥 Think of your router as the front desk of a hotel. If anyone can just stroll in and ask for the keys to your room, all your personal belongings are at risk! This vulnerability allows malicious actors to disclose administrative credentials, potentially leading to unauthorized access to your network. Imagine them walking in and tampering with your settings, changing your Wi-Fi password, or worse — snooping on your data! This could be absolutely devastating for your privacy and security.

Put simply

Think of your router as the front desk of a hotel. If anyone can just stroll in and ask for the keys to your room, all your personal belongings are at risk! The flaw exists in certain NETGEAR devices where administrative credentials can be disclosed due to inadequate protection measures. Affected models include CBR40, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, all prior to their respective patched versions.

What to do

This vulnerability allows malicious actors to disclose administrative credentials, potentially leading to unauthorized access to your network. Imagine them walking in and tampering with your settings, changing your Wi-Fi password, or worse — snooping on your data! This could be absolutely devastating for your privacy and security. To protect yourself, update your NETGEAR devices to the latest versions: CBR40 to 2.5.0.10, RBK752/RBR750/RBS750 to 3.2.15.25, and RBK852/RBR850/RBS850 to 3.2.10.11 immediately. This will reinforce your defenses against potential attackers! You've got this! Patching is quick and will put you on the path to securing your network! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.5th percentile
Published
2020-10-09T06:33Z
EPSS history
Timeline
  • 09 OCT 06:33Z
    Certain NETGEAR devices are affected by disclosure of administrative credentials
    cvelistv5