CVE-2020-35802

HIGH

NETGEAR Multiple Router and WiFi System Firmware - Sensitive Information Disclosure

Title source: llm

Description

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 before 2.6.1.4, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RBK842 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, and RBS40V before 2.6.1.4.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://kb.netgear.com/000062720/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-and-WiFi-Systems-PSV-2020-0331

Scores

CVSS v3 7.5

EPSS 0.0032

EPSS Percentile 55.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (14)

netgear/cbr40_firmware < 2.5.0.14

netgear/rax75_firmware < 1.0.3.102

netgear/rax80_firmware < 1.0.3.102

netgear/rbk752_firmware < 3.2.16.6

netgear/rbk842_firmware < 3.2.16.6

netgear/rbk852_firmware < 3.2.16.6

netgear/rbr750_firmware < 3.2.16.6

netgear/rbr840_firmware < 3.2.16.6

netgear/rbr850_firmware < 3.2.16.6

netgear/rbs750_firmware < 3.2.16.6

... and 4 more

Published Dec 30, 2020

Tracked Since Feb 18, 2026