What is CVE-2020-35802?

CVE-2020-35802 is a high-severity vulnerability in NETGEAR Cbr40. CVSS score: 7.5/10. Published 2020-12-30.

How severe is CVE-2020-35802?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in NETGEAR Cbr40

CVE-2020-35802

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 before 2.6.1.4, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RBK842 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, and RBS40V before 2.6.1.4.

EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Netgear Cbr40
Netgear Cbr40_firmware
Netgear Rax75
Netgear Rax75_firmware
Netgear Rax80
Netgear Rax80_firmware
Netgear Rbk752
Netgear Rbk752_firmware
Netgear Rbk842
Netgear Rbk842_firmware

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-35802?: CVE-2020-35802 is a high-severity vulnerability in NETGEAR Cbr40. CVSS score: 7.5/10. Published 2020-12-30.
How severe is CVE-2020-35802?: High severity. CVSS v3 base score is 7.5 out of 10.