Information disclosure in NETGEAR products - #VU73701

Vulnerability identifier: #VU73701

CSH Severity: Low

CVSS v4: 5.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to a security misconfiguration issue. A local attacker can gain unauthorized access to sensitive information on the system.

R6020
PR2000 fixed
R6120
WN3100RPv2
WN3000RPv2
WN3000RP
R6050
JR6150
D7000
WN3000RPv3
R6700v3
JWNR2010v5
WNR1000v4
JNR1010v2
WNR2020
WNR2050
R6230
R6220
R7100LG
WNR2000v5
D7800
R7800
R7500v2
R6400v2
R7000
R7000P

Install updates from vendor's website.

R6020 - update to 1.0.0.26
PR2000 fixed - update to 1.0.0.30
R6120 - update to 1.0.0.36
R7100LG - update to 1.0.0.42
WN3100RPv2 - update to 1.0.0.66
WNR2000v5 - update to 1.0.0.68
WN3000RPv2 - update to 1.0.0.78
WN3000RP - update to 1.0.0.78
R6050 - update to 1.0.1.14
JR6150 - update to 1.0.1.14
D7800 - update to 1.0.1.56
D7000 - update to 1.0.1.74
R7800 - update to 1.0.2.60
WN3000RPv3 - update to 1.0.2.78
R7500v2 - update to 1.0.3.20
R6700v3 - update to 1.0.4.128
R6400v2 - update to 1.0.4.128
R7000 - update to 1.0.11.130
JWNR2010v5 - update to 1.1.0.54
WNR1000v4 - update to 1.1.0.54
JNR1010v2 - update to 1.1.0.54
WNR2020 - update to 1.1.0.62
WNR2050 - update to 1.1.0.62
R6230 - update to 1.1.0.100
R6220 - update to 1.1.0.100
R7000P - update to 1.3.3.148

• https://kb.netgear.com/000065561/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2017-2454

• Information disclosure in NETGEAR Routers