CVE-2020-26908: Critical severity netgear d6200b firmware vulnerability
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before 1.0.0.42, R6050 before 1.0.1.22, JR6150 before 1.0.1.22, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.64, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R69002 before 1.2.0.62, and WNR2020 before 1.1.0.62.
Affected Software
Event History
Frequently Asked Questions
Which devices are affected by CVE-2020-26908?
Certain NETGEAR devices are affected, including D6200, D7000, PR2000, R6020, R6050, JR6150, R6080, R6120, R6220, R6230, and others.
What is the severity of CVE-2020-26908?
The severity of CVE-2020-26908 is rated as critical with a CVSS score of 9.8.
How does CVE-2020-26908 affect authentication?
CVE-2020-26908 allows for authentication bypass on affected NETGEAR devices.
Which firmware versions are vulnerable to CVE-2020-26908?
NETGEAR firmware versions before 1.1.00.36 (D6200), 1.0.1.74 (D7000), 1.0.0.30 (PR2000), 1.0.0.42 (R6020, R6080), 1.0.1.22 (R6050, JR6150), 1.0.0.66 (R6120), 1.1.0.100 (R6220, R6230), and others are vulnerable.
How can I fix CVE-2020-26908?
To fix CVE-2020-26908, update your NETGEAR device firmware to versions 1.1.00.36 (D6200), 1.0.1.74 (D7000), 1.0.0.30 (PR2000), 1.0.0.42 (R6020, R6080), 1.0.1.22 (R6050, JR6150), 1.0.0.66 (R6120), 1.1.0.100 (R6220, R6230), or later, as recommended by NETGEAR.