CVE-2020-13245

published 2020-05-28

CVE-2020-13245: Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120…

Priority P4 30 medium 5.9 CVSS 3.1

AV N AC H PR N UI N S U C N I H A N

Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
netgear	r6120_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r6220_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r6350_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r6400_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r6800_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r6850_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r7000p_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r7800_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r8000_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	r9000_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	rax120_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	rbr20_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	xr300_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—
netgear	xr500_firmware	v1.0.9.6_1.2.19 – v1.0.11.100_10.2.100	—

CVSS provenance

nvd v3.1 5.9 MEDIUM CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-295