Vulnerability in Netgear Ac2100
CVE-2020-35800
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80…
EPSS: 0.019 (76.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.4 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L.
Affected products
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-35800?
- CVE-2020-35800 is a critical-severity vulnerability in Netgear Ac2100. CVSS score: 9.4/10. Published 2020-12-30.
- How severe is CVE-2020-35800?
- Critical severity. CVSS v3 base score is 9.4 out of 10.
- Is CVE-2020-35800 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.