CVEvulnerability

CVE-2020-13245

5.9 MEDIUM Published 2020-05-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-05-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-295

Description

Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P.

Affected configurations

• netgear r6120 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r6220 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r6350 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r6400 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r6800 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r6850 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r7000p firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r7800 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r8000 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear r9000 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear rax120 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear rbr20 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear xr300 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100) • netgear xr500 firmware (>= v1.0.9.6 1.2.19 <= v1.0.11.100 10.2.100)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References