cbcvebase.
CVE-2020-13245
published 2020-05-28

CVE-2020-13245: Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120…

medium5.9CVSS 3.1
AVNACHPRNUINSUCNIHAN
Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P.

Affected

14 ranges
VendorProductVersion rangeFixed in
netgearr6120_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr6220_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr6350_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr6400_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr6800_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr6850_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr7000p_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr7800_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr8000_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearr9000_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearrax120_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearrbr20_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearxr300_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100
netgearxr500_firmwarev1.0.9.6_1.2.19 – v1.0.11.100_10.2.100