CVE-2020-26913
Description
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, SRK60 before 2.2.2.20, SRR60 before 2.2.2.20, SRS60 before 2.2.2.20, WN3000RPv2 before 1.0.0.78, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, WNR2000v5 before 1.0.0.70, XR450 before 2.3.2.40, and XR500 before 2.3.2.40.
How to fix
- netgear d6100_firmware1.0.0.63 or later
- netgear r7800_firmware1.0.2.60 or later
- netgear r8900_firmware1.0.4.26 or later
- netgear r9000_firmware1.0.4.26 or later
- netgear rbk20_firmware2.3.0.28 or later
- netgear rbr20_firmware2.3.0.28 or later
- netgear rbs20_firmware2.3.0.28 or later
- netgear rbk50_firmware2.3.0.32 or later
- netgear rbr50_firmware2.3.0.32 or later
- netgear rbs50_firmware2.3.0.32 or later
- netgear rbk40_firmware2.3.0.28 or later
- netgear rbs40_firmware2.3.0.28 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear d6100_firmware | v < 1.0.0.63 | 1.0.0.63 |
| netgear r7800_firmware | v < 1.0.2.60 | 1.0.2.60 |
| netgear r8900_firmware | v < 1.0.4.26 | 1.0.4.26 |
| netgear r9000_firmware | v < 1.0.4.26 | 1.0.4.26 |
| netgear rbk20_firmware | v < 2.3.0.28 | 2.3.0.28 |
| netgear rbr20_firmware | v < 2.3.0.28 | 2.3.0.28 |
| netgear rbs20_firmware | v < 2.3.0.28 | 2.3.0.28 |
| netgear rbk50_firmware | v < 2.3.0.32 | 2.3.0.32 |
| netgear rbr50_firmware | v < 2.3.0.32 | 2.3.0.32 |
| netgear rbs50_firmware | v < 2.3.0.32 | 2.3.0.32 |
| netgear rbk40_firmware | v < 2.3.0.28 | 2.3.0.28 |
| netgear rbs40_firmware | v < 2.3.0.28 | 2.3.0.28 |
| netgear srk60_firmware | v < 2.2.2.20 | 2.2.2.20 |
| netgear srr60_firmware | v < 2.2.2.20 | 2.2.2.20 |
| netgear srs60_firmware | v < 2.2.2.20 | 2.2.2.20 |
| netgear wn3000rpv2_firmware | v < 1.0.0.78 | 1.0.0.78 |
| netgear wndr4300v2_firmware | v < 1.0.0.58 | 1.0.0.58 |
| netgear wndr4500v3_firmware | v < 1.0.0.58 | 1.0.0.58 |
| netgear wnr2000v5_firmware | v < 1.0.0.70 | 1.0.0.70 |
| netgear xr450_firmware | v < 2.3.2.40 | 2.3.2.40 |
| netgear xr500_firmware | v < 2.3.2.40 | 2.3.2.40 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.