CVE-2020-26926

Certain NETGEAR devices are affected by authentication bypass

Critical · published October 9, 2020

CVSS v3.1
9.6
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

🚨 An authentication bypass in certain NETGEAR devices could let attackers waltz right in—no password required! 🔥 Think of it like a hotel with a glitchy front desk that never checks IDs. A guest can simply stroll in and access any room, leaving everyone vulnerable to unwanted surprises! An attacker exploiting this vulnerability could gain full control over your network devices, allowing them to alter settings or intercept your data. This is absolutely devastating for your privacy and security! If someone malicious gets in, they could wreak havoc without you even knowing.

Put simply

Think of it like a hotel with a glitchy front desk that never checks IDs. A guest can simply stroll in and access any room, leaving everyone vulnerable to unwanted surprises! This vulnerability affects NETGEAR devices by failing to correctly validate authentication requests, allowing unauthorized access to system settings. It affects specific models including CBR40, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 running outdated firmware versions.

What to do

An attacker exploiting this vulnerability could gain full control over your network devices, allowing them to alter settings or intercept your data. This is absolutely devastating for your privacy and security! If someone malicious gets in, they could wreak havoc without you even knowing. To protect yourself, immediately update affected devices to the latest firmware versions: CBR40 to 2.5.0.10, RBK752/RBR750/RBS750 to 3.2.15.25, and RBK852/RBR850/RBS850 to 3.2.10.11. Regularly check for firmware updates to ensure your devices stay secure. You've got this! By following these steps, you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00531 · 44.0th percentile
Published
2020-10-09T06:27Z
EPSS history
Timeline
  • 09 OCT 06:27Z
    Certain NETGEAR devices are affected by authentication bypass
    cvelistv5