CVE-2020-35800

Certain NETGEAR devices are affected by incorrect configuration of security settings

Critical · published December 29, 2020

CVSS v3.1
9.4
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

🔥 A critical misconfiguration is lurking in NETGEAR devices, making security settings wide open for attack! Think of it like an office with a missing security badge reader at the entrance—anyone can stroll in, pick up sensitive documents, and leave undetected! An unauthorized user could gain access to your network, potentially snooping on data or launching attacks on connected devices. This could lead to a complete compromise of your network, which is absolutely devastating!

Put simply

Think of it like an office with a missing security badge reader at the entrance—anyone can stroll in, pick up sensitive documents, and leave undetected! The vulnerability arises from improperly configured security settings in various NETGEAR models, allowing attackers to bypass authentication and gain unauthorized access to the device and its network.

What to do

An unauthorized user could gain access to your network, potentially snooping on data or launching attacks on connected devices. This could lead to a complete compromise of your network, which is absolutely devastating! Immediately update your NETGEAR devices to the latest firmware versions: for instance, AC2100 to at least 1.2.0.72 or R8000 to 1.0.4.58. Regularly check and secure all settings to ensure proper configurations. You've got this! With a quick update, you can lock down your network and keep those intruders out! 🛡️

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01614 · 75.8th percentile
Published
2020-12-29T23:29Z
EPSS history
Timeline
  • 29 DEC 23:29Z
    Certain NETGEAR devices are affected by incorrect configuration of security settings
    cvelistv5