Sensitive Information Disclosure in NETGEAR WAC505 Devices
CVE-2019-20652

7.9HIGH

Key Information:

Vendor
Netgear
Status
Wac505 Firmware
Vendor
CVE Published:
15 April 2020

Summary

NETGEAR WAC505 devices before version 8.2.1.16 are susceptible to a vulnerability that permits the unintended disclosure of sensitive information. This lapse can expose critical data to unauthorized individuals, potentially leading to further exploitation within network environments. The issue underscores the importance of ensuring devices are updated to safeguard against potential threats.

References

https://kb.netgear.com/000061489/Security-Advisory-for-Se...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.