CVE-2019-20686 - CVE House
Back to Database
Status published High CVE-2019-20686

Certain NETGEAR devices are affected by a buffer overflow by...

Vulnerability Description

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.40, R6080 before 1.0.0.40, R6050 before 1.0.1.18, R6120 before 1.0.0.48, R6220 before 1.1.0.86, R6260 before 1.1.0.64, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, and WNR2020 before 1.1.0.62.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-20686

Credits & Attribution

No credits recorded in the NVD database.

References

More from netgear

View All →
CVE-2022-48322
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by...
Unknown 0
CVE-2022-48196
Certain NETGEAR devices are affected by a buffer overflow by...
High 7.4
CVE-2022-48176
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before...
Unknown 0
CVE-2022-47052
The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi...
Unknown 0
CVE-2022-46424
An exploitable firmware modification vulnerability was discovered on the Netgear...
Unknown 0

Affected Vendor

Affected Software

d6200 firmware, d7000 firmware, jr6150 firmware, pr2000 firmware, r6020 firmware, r6080 firmware, r6050 firmware, r6120 firmware, r6220 firmware, r6260 firmware, r6700 firmware, r6800 firmware, r6900 firmware, wnr2020 firmware
Vulnerable Versions:
0

Timeline

Official Publish: April 16th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.