Sensitive Information Disclosure in NETGEAR MR1100 Devices
CVE-2019-20649

6.9MEDIUM

Key Information:

Vendor

Netgear
Status
Mr1100 Firmware
Vendor
CVE Published:
15 April 2020

What is CVE-2019-20649?

NETGEAR MR1100 devices prior to firmware version 12.06.08.00 are susceptible to a vulnerability that allows for the disclosure of sensitive information. This risk could lead to unauthorized access to confidential data. It is essential for users to upgrade their devices to the latest firmware to mitigate potential exploits associated with this vulnerability. For detailed mitigation strategies, refer to the NETGEAR Security Advisory.

References

https://kb.netgear.com/000061493/Security-Advisory-for-Se...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.