تحديثات NETGEAR
3035تاريخ التحذير
مستوى الخطورة
رقم التحذير
القطاع المستهدف
20 سبتمبر, 2020
● عالٍ جدًا
2020-1808
الكل
الوصف:
أصدرت NETGEAR عدة تحديثات لمعالجة عدد من الثغرات في المنتجات التالية:
- AC2100, running firmware versions prior to 1.2.0.62
- AC2400, running firmware versions prior to 1.2.0.62
- AC2600, running firmware versions prior to 1.2.0.62
- CBR40, running firmware versions prior to 2.5.0.10
- D6100, running firmware versions prior to 1.0.0.63
- D6200, running firmware versions prior to 1.1.00.40
- D6220, running firmware versions prior to 1.0.0.60
- D6400, running firmware versions prior to 1.0.0.94
- D7000, running firmware versions prior to 1.0.1.78
- D7000v2, running firmware versions prior to 1.0.0.62
- D7800, running firmware versions prior to 1.0.1.58
- D8500, running firmware versions prior to 1.0.3.50
- DC112A, running firmware versions prior to 1.0.0.48
- DGN2200v4, running firmware versions prior to 1.0.0.114
- EAX20, running firmware versions prior to 1.0.0.36
- EAX80, running firmware versions prior to 1.0.1.62
- EX3700, running firmware versions prior to 1.0.0.84
- EX3800, running firmware versions prior to 1.0.0.84
- EX3920, running firmware versions prior to 1.0.0.84
- EX6000, running firmware versions prior to 1.0.0.44
- EX6100, running firmware versions prior to 1.0.2.28
- EX6120, running firmware versions prior to 1.0.0.54
- EX6130, running firmware versions prior to 1.0.0.36
- EX6150, running firmware versions prior to 1.0.0.46
- EX6200, running firmware versions prior to 1.0.3.94
- EX6920, running firmware versions prior to 1.0.0.54
- EX7000, running firmware versions prior to 1.0.1.90
- EX7500, running firmware versions prior to 1.0.0.68
- EX7700, running firmware versions prior to 1.0.0.210
- GS110EMX, running firmware versions prior to 1.0.1.7
- GS808E, running firmware versions prior to 1.7.1.0
- GS810EMX, running firmware versions prior to 1.7.1.3
- JGS516PE, running firmware versions prior to 2.6.0.43
- JR6150, running firmware versions prior to 1.0.1.26
- MK62, running firmware versions prior to 1.0.5.102
- MR60, running firmware versions prior to 1.0.5.102
- MS60, running firmware versions prior to 1.0.5.102
- R6020, running firmware versions prior to 1.0.0.42
- R6050, running firmware versions prior to 1.0.1.26
- R6080, running firmware versions prior to 1.0.0.42
- R6120, running firmware versions prior to 1.0.0.66
- R6220, running firmware versions prior to 1.1.0.100
- R6230, running firmware versions prior to 1.1.0.100
- R6250, running firmware versions prior to 1.0.4.42
- R6260, running firmware versions prior to 1.1.0.66
- R6300v2, running firmware versions prior to 1.0.4.42
- R6400, running firmware versions prior to 1.0.1.62
- R6400v2, running firmware versions prior to 1.0.2.66
- R6400v2, running firmware versions prior to 1.0.4.98
- R6700, running firmware versions prior to 1.0.2.16
- R6700v2, running firmware versions prior to 1.2.0.62
- R6700v3, running firmware versions prior to 1.0.2.66
- R6700v3, running firmware versions prior to 1.0.4.98
- R6800, running firmware versions prior to 1.2.0.62
- R6900, running firmware versions prior to 1.0.2.16
- R6900P, running firmware versions prior to 1.3.2.124
- R6900v2, running firmware versions prior to 1.2.0.62
- R7000, running firmware versions prior to 1.0.11.106
- R7000P, running firmware versions prior to 1.3.2.124
- R7100LG, running firmware versions prior to 1.0.0.50
- R7100LG, running firmware versions prior to 1.0.0.56
- R7300DST, running firmware versions prior to 1.0.0.70
- R7450, running firmware versions prior to 1.2.0.62
- R7500v2, running firmware versions prior to 1.0.3.48
- R7800, running firmware versions prior to 1.0.2.68
- R7850, running firmware versions prior to 1.0.5.60
- R7900, running firmware versions prior to 1.0.3.8
- R7900, running firmware versions prior to 1.0.4.26
- R7900P, running firmware versions prior to 1.4.1.62
- R7960P, running firmware versions prior to 1.4.1.62
- R8000, running firmware versions prior to 1.0.4.58
- R8000P, running firmware versions prior to 1.4.1.62
- R8300, running firmware versions prior to 1.0.2.134
- R8500, running firmware versions prior to 1.0.2.134
- R8900, running firmware versions prior to 1.0.4.28
- R9000, running firmware versions prior to 1.0.4.28
- RAX120, running firmware versions prior to 1.0.0.78
- RAX15, running firmware versions prior to 1.0.1.54
- RAX20, running firmware versions prior to 1.0.1.54
- RAX200, running firmware versions prior to 1.0.2.8
- RAX40, running firmware versions prior to 1.0.3.80
- RAX45, running firmware versions prior to 1.0.2.32
- RAX50, running firmware versions prior to 1.0.2.32
- RAX75, running firmware versions prior to 1.0.2.76
- RAX80, running firmware versions prior to 1.0.2.76
- RBK20, running firmware versions prior to 2.3.0.28
- RBK40, running firmware versions prior to 2.3.0.28
- RBK50, running firmware versions prior to 2.3.0.32
- RBK50, running firmware versions prior to 2.3.5.30
- RBK752, running firmware versions prior to 3.2.15.25
- RBK752, running firmware versions prior to 3.2.16.6
- RBK852, running firmware versions prior to 3.2.10.11
- RBK852, running firmware versions prior to 3.2.15.25
- RBK852, running firmware versions prior to 3.2.16.6
- RBR20, running firmware versions prior to 2.3.0.28
- RBR40, running firmware versions prior to 2.3.0.28
- RBR50, running firmware versions prior to 2.3.0.32
- RBR50, running firmware versions prior to 2.3.5.30
- RBR750, running firmware versions prior to 3.2.15.25
- RBR750, running firmware versions prior to 3.2.16.6
- RBR840, running firmware versions prior to 3.2.16.6
- RBR850, running firmware versions prior to 3.2.10.11
- RBR850, running firmware versions prior to 3.2.15.25
- RBR850, running firmware versions prior to 3.2.16.6
- RBS20, running firmware versions prior to 2.3.0.28
- RBS40, running firmware versions prior to 2.3.0.28
- RBS40V-100, running firmware versions prior to 2.5.1.6
- RBS40V-200, running firmware versions prior to 1.0.0.46
- RBS50, running firmware versions prior to 2.3.0.32
- RBS50, running firmware versions prior to 2.3.5.30
- RBS750, running firmware versions prior to 3.2.15.25
- RBS750, running firmware versions prior to 3.2.16.6
- RBS850, running firmware versions prior to 3.2.10.11
- RBS850, running firmware versions prior to 3.2.15.25
- RBS850, running firmware versions prior to 3.2.16.6
- RBW30, running firmware versions prior to 2.5.0.4
- RS400, running firmware versions prior to 1.5.0.48
- SRK60, running firmware versions prior to 2.2.2.20
- SRK60, running firmware versions prior to 2.5.2.104
- SRK60, running firmware versions prior to 2.5.3.110
- SRR60, running firmware versions prior to 2.2.2.20
- SRR60, running firmware versions prior to 2.5.2.104
- SRR60, running firmware versions prior to 2.5.3.110
- SRS60, running firmware versions prior to 2.2.2.20
- SRS60, running firmware versions prior to 2.5.2.104
- SRS60, running firmware versions prior to 2.5.3.110
- WAC124, running firmware versions prior to 1.0.4.6
- WAC510, running firmware versions prior to 8.2.6.7
- WAC720, running firmware versions prior to 3.9.1.13
- WAC730, running firmware versions prior to 3.9.1.13
- WC7500, running firmware versions prior to 6.5.5.24
- WC7600, running firmware versions prior to 6.5.5.24
- WC7600v2, running firmware versions prior to 6.5.5.24
- WC9500, running firmware versions prior to 6.5.5.24
- WN2500RPv2, running firmware versions prior to 1.0.1.56
- WN3000RPv2, running firmware versions prior to 1.0.0.78
- WNDR3400v3, running firmware versions prior to 1.0.1.32
- WNDR4300v2, running firmware versions prior to 1.0.0.58
- WNDR4500v3, running firmware versions prior to 1.0.0.58
- WNR1000v3, running firmware versions prior to 1.0.2.78
- WNR2000v2, running firmware versions prior to 1.2.0.12
- WNR2000v5, running firmware versions prior to 1.0.0.70
- WNR2020, running firmware versions prior to 1.1.0.62
- XR300, running firmware versions prior to 1.0.3.50
- XR450, running firmware versions prior to 2.3.2.40
- XR500, running firmware versions prior to 2.3.2.56
- XR700, running firmware versions prior to 1.0.1.10
- XS512EM, running firmware versions prior to 1.0.1.3
- XS724EM, running firmware versions prior to 1.0.1.3
التهديدات:
يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:
- الكشف والإفصاح غير المصرح به للمعلومات
- تجاوز المصادقات
- هجمة حجب الخدمة (DoS attack)
- هجمة البرمجة عبر المواقع (Cross-site scripting (XSS
الإجراءات الوقائية:
يوصي المركز بتحديث النسخ المتأثرة حيث أصدرت NETGEAR توضيحًا لهذه التحديثات:
- https://kb.netgear.com/000062321/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Wireless-Controllers-PSV-2020-0268
- https://kb.netgear.com/000062322/Security-Advisory-for-Security-Misconfiguration-on-EX7700-PSV-2020-0109
- https://kb.netgear.com/000062323/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0011
- https://kb.netgear.com/000062324/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0027
- https://kb.netgear.com/000062325/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0109
- https://kb.netgear.com/000062326/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0028
- https://kb.netgear.com/000062327/Security-Advisory-for-Denial-of-Service-on-GS808E-PSV-2019-0200
- https://kb.netgear.com/000062328/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Wireless-Access-Points-PSV-2020-0141
- https://kb.netgear.com/000062329/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Wireless-Controllers-PSV-2020-0180
- https://kb.netgear.com/000062330/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Wireless-Controllers-PSV-2020-0139
- https://kb.netgear.com/000062331/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Wireless-Access-Points-Routers-and-WiFi-Systems-PSV-2020-0136
- https://kb.netgear.com/000062332/Security-Advisory-for-Authentication-Bypass-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0305
- https://kb.netgear.com/000062333/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0327
- https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377
- https://kb.netgear.com/000062335/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Extenders-and-Routers-PSV-2018-0243
- https://kb.netgear.com/000062336/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Extender-and-Routers-PSV-2018-0242
- https://kb.netgear.com/000062337/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2019-0012
- https://kb.netgear.com/000062338/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-WiFi-Systems-PSV-2018-0554
- https://kb.netgear.com/000062339/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0014
- https://kb.netgear.com/000062340/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2018-0140
- https://kb.netgear.com/000062341/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Routers-PSV-2019-0018
- https://kb.netgear.com/000062342/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Routers-PSV-2019-0016
- https://kb.netgear.com/000062344/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2020-0163
- https://kb.netgear.com/000062345/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-WiFi-Systems-PSV-2020-0009
- https://kb.netgear.com/000062347/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0264
- https://kb.netgear.com/000062348/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0048
- https://kb.netgear.com/000062349/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0047
- https://kb.netgear.com/000062350/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0046
- https://kb.netgear.com/000062351/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0043
- https://kb.netgear.com/000062352/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0041
- https://kb.netgear.com/000062353/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-WiFi-Systems-PSV-2020-0036
- https://kb.netgear.com/000062354/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0032
- https://kb.netgear.com/000062355/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-WiFi-Systems-PSV-2020-0030
- https://kb.netgear.com/000062356/Security-Advisory-for-Security-Misconfiguration-on-RAX40-PSV-2019-0267
- https://kb.netgear.com/000062357/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0045