Configuration in NETGEAR products - #VU77789

Vulnerability identifier: #VU77789

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-16

Exploitation vector: Local access

Exploit availability: No public exploit available

The issue may allow a local attacker to bypass implemented security restrictions.

The issue exists due to the possibility to a security misconfiguration issue. A local attacker can gain access to sensitive information on the system.

MR70
MS70
R6700v3
RAXE450
RAXE500
RAX40v2
RAX35v2
RAX38v2
RAX42
RAX43
RAX48
RAX45
RAX50
RAX50S
MR80
MS80
MK82
MS60
MR60
MK62
C7000v2
CAX80
RBK752
RBR750
RBS750
RBK852
RBR850
RBS850
RBK842
RBR840
RBS840
CBR750
RBRE960
RBSE960

Install updates from vendor's website.

MR70 - update to 1.0.2.26
MS70 - update to 1.0.2.26
R6700v3 - update to 1.0.4.128
RAXE450 - update to 1.0.10.86
RAXE500 - update to 1.0.10.86
RAX40v2 - update to 1.0.11.112
RAX35v2 - update to 1.0.11.112
RAX38v2 - update to 1.0.11.112
RAX42 - update to 1.0.11.112
RAX43 - update to 1.0.11.112
RAX48 - update to 1.0.11.112
RAX45 - update to 1.0.11.112
RAX50 - update to 1.0.11.112
RAX50S - update to 1.0.11.112
MR80 - update to 1.1.7.12
MS80 - update to 1.1.7.12
MK82 - update to 1.1.7.12
MS60 - update to 1.1.7.132
MR60 - update to 1.1.7.132
MK62 - update to 1.1.7.132
C7000v2 - update to 1.03.08
CAX80 - update to 2.1.4.2
RBK752 - update to 4.6.9.11
RBR750 - update to 4.6.9.11
RBS750 - update to 4.6.9.11
RBK852 - update to 4.6.9.11
RBR850 - update to 4.6.9.11
RBS850 - update to 4.6.9.11
RBK842 - update to 4.6.9.11
RBR840 - update to 4.6.9.11
RBS840 - update to 4.6.9.11
CBR750 - update to 4.6.14.4
RBRE960 - update to 6.3.7.5
RBSE960 - update to 6.3.7.5

• https://kb.netgear.com/000065713/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-WiFi-Systems-PSV-2022-0010

• Security Misconfiguration in NETGEAR Routers and WiFi Systems