| Summary | Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before 2017-01-06, D6300 before 2017-01-06, DGN1000v3 before 2017-01-06, DGN2200v1 before 2017-01-06, DGN2200v3 before 2017-01-06, DGN2200V4 before 2017-01-06, DGN2200Bv3 before 2017-01-06, DGN2200Bv4 before 2017-01-06, DGND3700v1 before 2017-01-06, DGND3700v2 before 2017-01-06, DGND3700Bv2 before 2017-01-06, JNR1010v1 before 2017-01-06, JNR1010v2 before 2017-01-06, JNR3300 before 2017-01-06, JR6100 before 2017-01-06, JR6150 before 2017-01-06, JWNR2000v5 before 2017-01-06, R2000 before 2017-01-06, R6050 before 2017-01-06, R6100 before 2017-01-06, R6200 before 2017-01-06, R6200v2 before 2017-01-06, R6220 before 2017-01-06, R6250 before 2017-01-06, R6300 before 2017-01-06, R6300v2 before 2017-01-06, R6700 before 2017-01-06, R7000 before 2017-01-06, R7900 before 2017-01-06, R7500 before 2017-01-06, R8000 before 2017-01-06, WGR614v10 before 2017-01-06, WNR1000v2 before 2017-01-06, WNR1000v3 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2000v3 before 2017-01-06, WNR2000v4 before 2017-01-06, WNR2000v5 before 2017-01-06, WNR2200 before 2017-01-06, WNR2500 before 2017-01-06, WNR3500Lv2 before 2017-01-06, WNDR3400v2 before 2017-01-06, WNDR3400v3 before 2017-01-06, WNDR3700v3 before 2017-01-06, WNDR3700v4 before 2017-01-06, WNDR3700v5 before 2017-01-06, WNDR4300 before 2017-01-06, WNDR4300v2 before 2017-01-06, WNDR4500v1 before 2017-01-06, WNDR4500v2 before 2017-01-06, and WNDR4500v3 before 2017-01-06. |
|---|---|
| Publication Date | April 29, 2020, 2:15 a.m. |
| Registration Date | Jan. 26, 2021, 2:06 p.m. |
| Last Update | Nov. 21, 2024, 11:45 a.m. |
| CVSS3.1 : HIGH | |
| スコア | 7.5 |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 攻撃元区分(AV) | ネットワーク |
| 攻撃条件の複雑さ(AC) | 低 |
| 攻撃に必要な特権レベル(PR) | 不要 |
| 利用者の関与(UI) | 不要 |
| 影響の想定範囲(S) | 変更なし |
| 機密性への影響(C) | 高 |
| 完全性への影響(I) | なし |
| 可用性への影響(A) | なし |
| CVSS2.0 : MEDIUM | |
| Score | 5.0 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| 攻撃元区分(AV) | ネットワーク |
| 攻撃条件の複雑さ(AC) | 低 |
| 攻撃前の認証要否(Au) | 不要 |
| 機密性への影響(C) | 低 |
| 完全性への影響(I) | なし |
| 可用性への影響(A) | なし |
| Get all privileges. | いいえ |
| Get user privileges | いいえ |
| Get other privileges | いいえ |
| User operation required | いいえ |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:ac1450_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:ac1450:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:c6300_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:c6300:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d1500_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d1500:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d3600_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d3600:-:*:*:*:*:*:*:* | ||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d500_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d500:-:*:*:*:*:*:*:* | ||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d6000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d6000:-:*:*:*:*:*:*:* | ||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:* | ||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d6200:-:*:*:*:*:*:*:* | ||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d6200b_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d6200b:-:*:*:*:*:*:*:* | ||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d6300_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d6300:-:*:*:*:*:*:*:* | ||||
| Configuration11 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:d6300b_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:d6300b:-:*:*:*:*:*:*:* | ||||
| Configuration12 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgn1000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgn1000:v3:*:*:*:*:*:*:* | ||||
| Configuration13 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgn2200:v1:*:*:*:*:*:*:* | ||||
| Configuration14 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgn2200:v3:*:*:*:*:*:*:* | ||||
| Configuration15 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgn2200:v4:*:*:*:*:*:*:* | ||||
| Configuration16 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgn2200b_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgn2200b:v3:*:*:*:*:*:*:* | ||||
| Configuration17 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgn2200b_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgn2200b:v4:*:*:*:*:*:*:* | ||||
| Configuration18 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgnd3700_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgnd3700:v1:*:*:*:*:*:*:* | ||||
| Configuration19 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgnd3700_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgnd3700:v2:*:*:*:*:*:*:* | ||||
| Configuration20 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:dgnd3700b_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:dgnd3700b:v2:*:*:*:*:*:*:* | ||||
| Configuration21 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:jnr1010:v1:*:*:*:*:*:*:* | ||||
| Configuration22 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:jnr1010_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:jnr1010:v2:*:*:*:*:*:*:* | ||||
| Configuration23 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:jnr3300_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:jnr3300:-:*:*:*:*:*:*:* | ||||
| Configuration24 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:jr6100_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:jr6100:-:*:*:*:*:*:*:* | ||||
| Configuration25 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:jr6150_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:jr6150:-:*:*:*:*:*:*:* | ||||
| Configuration26 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:jwnr2000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:jwnr2000:v5:*:*:*:*:*:*:* | ||||
| Configuration27 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r2000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r2000:-:*:*:*:*:*:*:* | ||||
| Configuration28 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6050:-:*:*:*:*:*:*:* | ||||
| Configuration29 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6100:-:*:*:*:*:*:*:* | ||||
| Configuration30 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6200_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6200:-:*:*:*:*:*:*:* | ||||
| Configuration31 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6200_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6200:v2:*:*:*:*:*:*:* | ||||
| Configuration32 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:* | ||||
| Configuration33 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:* | ||||
| Configuration34 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6300:-:*:*:*:*:*:*:* | ||||
| Configuration35 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:* | ||||
| Configuration36 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r6700:-:*:*:*:*:*:*:* | ||||
| Configuration37 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:* | ||||
| Configuration38 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r7500:-:*:*:*:*:*:*:* | ||||
| Configuration39 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:* | ||||
| Configuration40 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:* | ||||
| Configuration41 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wgr614_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wgr614:v10:*:*:*:*:*:*:* | ||||
| Configuration42 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr3400:v2:*:*:*:*:*:*:* | ||||
| Configuration43 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:* | ||||
| Configuration44 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr3700:v3:*:*:*:*:*:*:* | ||||
| Configuration45 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr3700:v4:*:*:*:*:*:*:* | ||||
| Configuration46 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr3700_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr3700:v5:*:*:*:*:*:*:* | ||||
| Configuration47 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr4300:-:*:*:*:*:*:*:* | ||||
| Configuration48 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr4300_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr4300:v2:*:*:*:*:*:*:* | ||||
| Configuration49 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr4500:v1:*:*:*:*:*:*:* | ||||
| Configuration50 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr4500:v2:*:*:*:*:*:*:* | ||||
| Configuration51 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wndr4500_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wndr4500:v3:*:*:*:*:*:*:* | ||||
| Configuration52 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr1000:v2:*:*:*:*:*:*:* | ||||
| Configuration53 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr1000:v3:*:*:*:*:*:*:* | ||||
| Configuration54 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr1000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr1000:v4:*:*:*:*:*:*:* | ||||
| Configuration55 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr2000:v3:*:*:*:*:*:*:* | ||||
| Configuration56 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr2000:v4:*:*:*:*:*:*:* | ||||
| Configuration57 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr2000_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr2000:v5:*:*:*:*:*:*:* | ||||
| Configuration58 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr2200_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr2200:-:*:*:*:*:*:*:* | ||||
| Configuration59 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr2500_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr2500:-:*:*:*:*:*:*:* | ||||
| Configuration60 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:* | 2017-01-06 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:* | ||||
| Title | 複数の NETGEAR デバイスにおける情報漏えいに関する脆弱性 |
|---|---|
| Summary | 複数の NETGEAR デバイスには、情報漏えいに関する脆弱性が存在します。 |
| Possible impacts | 情報を取得される可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Jan. 6, 2017, midnight |
| Registration Date | June 1, 2020, 12:29 p.m. |
| Last Update | June 1, 2020, 12:29 p.m. |
| ネットギア |
| AC1450 ファームウェア 2017/01/06 より前 |
| C6300 ファームウェア 2017/01/06 より前 |
| D1500 ファームウェア 2017/01/06 より前 |
| D3600 ファームウェア 2017/01/06 より前 |
| D500 ファームウェア 2017/01/06 より前 |
| D6000 ファームウェア 2017/01/06 より前 |
| D6100 ファームウェア 2017/01/06 より前 |
| D6200 ファームウェア 2017/01/06 より前 |
| D6200B ファームウェア 2017/01/06 より前 |
| D6300 ファームウェア 2017/01/06 より前 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2020年06月01日] 掲載 |
June 1, 2020, 12:29 p.m. |