CVE-2020-17409 : This vulnerability allows network-adjacent attackers to disclose sensitive infor

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-10754.

Published 2020-10-13 17:15:14

Updated 2020-12-03 15:46:35

Source Zero Day Initiative

View at NVD, CVE.org

Products affected by CVE-2020-17409

Netgear » R6220 Firmware
Versions before (<) 1.1.0.100
cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6220 » Version: N/A
Netgear » Wnr2020 Firmware » Version: N/A
cpe:2.3:o:netgear:wnr2020_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Wnr2020 » Version: N/A
Netgear » R6020 Firmware
Versions before (<) 1.0.0.44
cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6020 » Version: N/A
Netgear » R6080 Firmware
Versions before (<) 1.0.0.44
cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6080 » Version: N/A
Netgear » R6120 Firmware
Versions before (<) 1.0.0.70
cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6120 » Version: N/A
Netgear » R6230 Firmware
Versions before (<) 1.1.0.100
cpe:2.3:o:netgear:r6230_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6230 » Version: N/A
Netgear » R6260 Firmware
Versions before (<) 1.1.0.76
cpe:2.3:o:netgear:r6260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6260 » Version: N/A
Netgear » R6850 Firmware
Versions before (<) 1.1.0.76
cpe:2.3:o:netgear:r6850_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6850 » Version: N/A
Netgear » R6350 Firmware
Versions before (<) 1.1.0.76
cpe:2.3:o:netgear:r6350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6350 » Version: N/A
Netgear » R6330 Firmware
Versions before (<) 1.1.0.76
cpe:2.3:o:netgear:r6330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6330 » Version: N/A
Netgear » Jnr3210 Firmware » Version: N/A
cpe:2.3:o:netgear:jnr3210_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Jnr3210 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-17409

EPSS FAQ

0.30%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 70 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-17409

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:A/AC:L/Au:N/C:P/I:N/A:N	6.5	2.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.5	MEDIUM	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	Zero Day Initiative
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2020-17409

CWE-288 Authentication Bypass Using an Alternate Path or Channel

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Assigned by: zdi-disclosures@trendmicro.com (Primary)

References for CVE-2020-17409

https://www.zerodayinitiative.com/advisories/ZDI-20-1176/

ZDI-20-1176 | Zero Day Initiative
Third Party Advisory;VDB Entry
https://kb.netgear.com/000062304/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2020-0258

Security Advisory for Authentication Bypass on Some Routers, PSV-2020-0258 | Answer | NETGEAR Support
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-17409

Products affected by CVE-2020-17409

Exploit prediction scoring system (EPSS) score for CVE-2020-17409

CVSS scores for CVE-2020-17409

CWE ids for CVE-2020-17409

References for CVE-2020-17409