CVE-2020-35803 : Security Advisory and Response
Learn about CVE-2020-35803 affecting certain NETGEAR devices, leading to sensitive information disclosure. Find mitigation steps and affected systems here.
Certain NETGEAR devices are affected by the disclosure of sensitive information.
Understanding CVE-2020-35803
Certain NETGEAR devices are impacted by a vulnerability that could lead to the exposure of sensitive information.
What is CVE-2020-35803?
CVE-2020-35803 is a vulnerability affecting specific NETGEAR devices, including models such as D6200, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6700v2, R6800, R6900v2, R7450, AC2100, AC2400, and AC2600.
The Impact of CVE-2020-35803
The vulnerability has the following impact:
- CVSS Base Score: 4.4 (Medium)
- Attack Complexity: Low
- Attack Vector: Local
- Confidentiality Impact: High
- Integrity Impact: None
- Privileges Required: High
- User Interaction: None
- Scope: Unchanged
- Availability Impact: None
Technical Details of CVE-2020-35803
Certain technical aspects of the CVE-2020-35803 vulnerability include:
Vulnerability Description
The vulnerability allows for the disclosure of sensitive information on the affected NETGEAR devices.
Affected Systems and Versions
The following NETGEAR devices are impacted by CVE-2020-35803:
- D6200 before 1.1.00.40
- D7000 before 1.0.1.78
- R6020 before 1.0.0.46
- R6080 before 1.0.0.46
- R6120 before 1.0.0.72
- R6220 before 1.1.0.100
- R6230 before 1.1.0.100
- R6260 before 1.1.0.76
- R6700v2 before 1.2.0.74
- R6800 before 1.2.0.74
- R6900v2 before 1.2.0.74
- R7450 before 1.2.0.74
- AC2100 before 1.2.0.74
- AC2400 before 1.2.0.74
- AC2600 before 1.2.0.74
Exploitation Mechanism
The vulnerability requires high privileges to exploit and has a low attack complexity, with a local attack vector.
Mitigation and Prevention
Steps to mitigate and prevent exploitation of CVE-2020-35803:
Immediate Steps to Take
- Update the firmware of the affected NETGEAR devices to the latest versions.
- Monitor vendor communications for patches and security advisories.
Long-Term Security Practices
- Regularly update firmware and software on all network devices.
- Implement strong password policies and network security measures.
Patching and Updates
- Apply patches and updates provided by NETGEAR to address the CVE-2020-35803 vulnerability.