NetSight
medium5.9

CVE-2020-13245

Certain NETGEAR devices are affected by Missing SSL Certificate Validation.

Impact

Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P.

Affected products

VendorProductAffected versions
NetgearR6120 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR6220 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR6350 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR6400 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR6800 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR6850 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR7000p Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR7800 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR8000 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearR9000 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearRax120 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
NetgearRbr20 Firmware
from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100

Weakness classification

References