What is CVE-2019-20729?

CVE-2019-20729 is a medium-severity vulnerability in Netgear Jndr3000. CVSS score: 4.4/10. Published 2020-04-16.

How severe is CVE-2019-20729?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Netgear Jndr3000

CVE-2019-20729

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNDR3000 before 1.0.0.22, R6250 before 1.0.4.26, R6300v2 before 1.0.4.22, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1…

EPSS: 0.003 (21.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Netgear Jndr3000
Netgear Jndr3000_firmware
Netgear R6250
Netgear R6250_firmware
Netgear R6300 — versions v2
Netgear R6300_firmware
Netgear R6400 — versions v2
Netgear R6400_firmware
Netgear R6700
Netgear R6700_firmware

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-20729?: CVE-2019-20729 is a medium-severity vulnerability in Netgear Jndr3000. CVSS score: 4.4/10. Published 2020-04-16.
How severe is CVE-2019-20729?: Medium severity. CVSS v3 base score is 4.4 out of 10.