CVE-2020-26905

Vulnerability

Unaffected NETGEAR WiFi system models (CBR40, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850) running firmware versions prior to the fixed releases (2.5.0.10 for CBR40, 3.2.15.25 for RBK752/RBR750/RBS750, and 3.2.10.11 for RBK852/RBR850/RBS850) are vulnerable to disclosure of administrative credentials [1]. The precise code path and condition required are not detailed in the available references.

Exploitation

An attacker who is on the same local network as the affected device (adjacent network position) can exploit the vulnerability without authentication. The available references do not provide a concrete sequence of steps, but the flaw allows retrieval of the device's administrative credentials [1].

Impact

Successful exploitation results in disclosure of the device's administrative credentials, leading to a complete compromise of confidentiality, integrity, and availability. The attacker gains full administrative control over the affected device [1].

Mitigation

NETGEAR has released fixed firmware versions: 2.5.0.10 for CBR40, 3.2.15.25 for RBK752/RBR750/RBS750, and 3.2.10.11 for RBK852/RBR850/RBS850 [1]. Users are strongly recommended to update their devices to the latest firmware immediately. No workarounds for unpatched devices are provided in the references.