漏洞描述
NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers are vulnerable to authentication bypass vulnerabilities which could allow network-adjacent attackers to bypass authentication on affected installations.
影响产品
未知厂商NETGEAR-WNR2020查看产品 →未知厂商NETGEAR-R6220查看产品 →未知厂商NETGEAR-R6020查看产品 →未知厂商NETGEAR-R6080查看产品 →netgearac2100_firmware查看产品 →netgearNETGEAR R6120查看产品 →netgearNETGEAR R6700v2查看产品 →netgearNETGEAR R6260查看产品 →netgearNETGEAR R6900v2查看产品 →netgearNETGEAR R7450查看产品 →netgearNETGEAR R6800查看产品 →netgearNETGEAR Nighthawk AC2400查看产品 →netgearNETGEAR JNR3210查看产品 →
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wzt.ac.cnhttps://wzt.ac.cn/2021/01/13/AC2400_vuln/↗www.zerodayinitiative.comhttps://www.zerodayinitiative.com/advisories/ZDI-20-1451/↗cve.mitre.orghttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27866↗kb.netgear.comhttps://kb.netgear.com/000062641/Security-Advisory-for-Password-Recovery-Vulnerabilities-on-Some-Routers↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-27866↗