Information disclosure in NETGEAR products - #VU69030
Published: November 7, 2022
Vulnerability identifier: #VU69030
CSH Severity: Medium
CVSS v4: 6.8 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-200
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. A remote attacker on the local network can gain unauthorized access to sensitive information on the system.
Affected software
EX6410
EX6420
EX7320
EX6250
EX6400v2
EX7300v2
EX7700
EX6100v2
EX6150v2
EX8000
XR500
XR450
LBR1020
LBR20
RBS20
RBK40
RBR40
RBS40
RBR20
RBK20
RBR50
RBK352
RBR350
RBS350
XR700
EX6200v2
R8900
R9000
RAX70
RAX78
RAX10
R6700AX
RAX120v2
RAX120
EX6420
EX7320
EX6250
EX6400v2
EX7300v2
EX7700
EX6100v2
EX6150v2
EX8000
XR500
XR450
LBR1020
LBR20
RBS20
RBK40
RBR40
RBS40
RBR20
RBK20
RBR50
RBK352
RBR350
RBS350
XR700
EX6200v2
R8900
R9000
RAX70
RAX78
RAX10
R6700AX
RAX120v2
RAX120
Remediation
Install updates from vendor's website.
EX6410 - update to 1.0.0.146
EX6420 - update to 1.0.0.146
EX7320 - update to 1.0.0.146
EX6250 - update to 1.0.0.146
EX6400v2 - update to 1.0.0.146
EX7300v2 - update to 1.0.0.146
EX7700 - update to 1.0.0.226
XR700 - update to 1.0.1.44
EX6200v2 - update to 1.0.1.86
EX6100v2 - update to 1.0.1.106
EX6150v2 - update to 1.0.1.106
EX8000 - update to 1.0.1.240
R8900 - update to 1.0.5.36
R9000 - update to 1.0.5.36
RAX70 - update to 1.0.5.108
RAX78 - update to 1.0.5.108
RAX10 - update to 1.0.5.108
R6700AX - update to 1.0.5.108
RAX120v2 - update to 1.2.0.16
RAX120 - update to 1.2.0.16
XR500 - update to 2.3.2.134
XR450 - update to 2.3.2.134
LBR1020 - update to 2.6.3.58
LBR20 - update to 2.6.3.58
RBS20 - update to 2.7.4.24
RBK40 - update to 2.7.4.24
RBR40 - update to 2.7.4.24
RBS40 - update to 2.7.4.24
RBR20 - update to 2.7.4.24
RBK20 - update to 2.7.4.24
RBR50 - update to 2.7.4.24
RBK352 - update to 4.4.1.14
RBR350 - update to 4.4.1.14
RBS350 - update to 4.4.1.14
EX6420 - update to 1.0.0.146
EX7320 - update to 1.0.0.146
EX6250 - update to 1.0.0.146
EX6400v2 - update to 1.0.0.146
EX7300v2 - update to 1.0.0.146
EX7700 - update to 1.0.0.226
XR700 - update to 1.0.1.44
EX6200v2 - update to 1.0.1.86
EX6100v2 - update to 1.0.1.106
EX6150v2 - update to 1.0.1.106
EX8000 - update to 1.0.1.240
R8900 - update to 1.0.5.36
R9000 - update to 1.0.5.36
RAX70 - update to 1.0.5.108
RAX78 - update to 1.0.5.108
RAX10 - update to 1.0.5.108
R6700AX - update to 1.0.5.108
RAX120v2 - update to 1.2.0.16
RAX120 - update to 1.2.0.16
XR500 - update to 2.3.2.134
XR450 - update to 2.3.2.134
LBR1020 - update to 2.6.3.58
LBR20 - update to 2.6.3.58
RBS20 - update to 2.7.4.24
RBK40 - update to 2.7.4.24
RBR40 - update to 2.7.4.24
RBS40 - update to 2.7.4.24
RBR20 - update to 2.7.4.24
RBK20 - update to 2.7.4.24
RBR50 - update to 2.7.4.24
RBK352 - update to 4.4.1.14
RBR350 - update to 4.4.1.14
RBS350 - update to 4.4.1.14