CVE-2020-26904

Vulnerability

An administrative credential disclosure vulnerability exists in several NETGEAR WiFi system models. Affected devices include CBR40 before firmware 2.5.0.10, RBK752, RBR750, RBS750 before 3.2.15.25, and RBK852, RBR850, RBS850 before 3.2.10.11. The vulnerability allows an attacker to obtain admin credentials without proper authentication [1].

Exploitation

An attacker can exploit this vulnerability from an adjacent network (LAN-side) by sending specially crafted requests to the device's management interface. No prior authentication or user interaction is required. The exact attack vector is not detailed but likely involves accessing a management endpoint that exposes credentials [1].

Impact

Successful exploitation enables an attacker to retrieve administrative credentials, leading to full compromise of the affected device. The attacker gains complete control over the WiFi system, including the ability to modify settings, monitor traffic, and potentially pivot to other devices on the network [1].

Mitigation

NETGEAR has released fixed firmware versions for all affected products: CBR40 firmware 2.5.0.10, RBK752, RBR750, RBS750 firmware 3.2.15.25, and RBK852, RBR850, RBS850 firmware 3.2.10.11. Users should upgrade to the latest firmware immediately via the NETGEAR Support website [1].