Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-13245

Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P.

Published

2020-05-28T19:15:10.830

Last Modified

2024-11-21T05:00:51.973

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-295
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System netgear r6120_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r6120 - No
Operating System netgear r6220_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r6220 - No
Operating System netgear r6350_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r6350 - No
Operating System netgear r6400_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r6400 - No
Operating System netgear r6400_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r6400 v2 No
Operating System netgear r6800_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r6800 - No
Operating System netgear r6850_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r6850 - No
Operating System netgear r7000p_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r7000p - No
Operating System netgear r7800_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r7800 - No
Operating System netgear r8000_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r8000 - No
Operating System netgear r9000_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear r9000 - No
Operating System netgear rax120_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear rax120 - No
Operating System netgear rbr20_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear rbr20 - No
Operating System netgear xr300_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear xr300 - No
Operating System netgear xr500_firmware ≤ v1.0.11.100_10.2.100 Yes
Hardware netgear xr500 - No
References