Authentication Bypass Vulnerability in NETGEAR Routers
CVE-2020-17409

6.5MEDIUM

Key Information:

Vendor

Netgear
Status
Multiple Routers
Vendor
CVE Published:
13 October 2020

What is CVE-2020-17409?

This vulnerability in certain NETGEAR routers allows network-adjacent attackers to exploit a flaw in the mini_httpd service, which listens on TCP port 80 by default. This issue arises from incorrect string matching logic when attempting to access protected pages, permitting unauthorized users to disclose stored credentials without requiring any authentication. As a result, this vulnerability poses a significant risk of further compromise within affected installations. Proper remedial actions should be considered to secure these devices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Multiple Routers 1.0.66

References

https://www.zerodayinitiative.com/advisories/ZDI-20-1176/
x_refsource_MISC
https://kb.netgear.com/000062304/Security-Advisory-for-Au...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anonymous
JSON
.