What’s Vulnerable › Vulnerabilities
CVE-2020-13245
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-05-28 · updated 2026-06-17
- Weakness: CWE-295
Description
Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P.
Affected products
- NETGEAR R6120 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R6220 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R6350 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R6400 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R6800 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R6850 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R7000P: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R7800 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R8000 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR R9000 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR Rax120 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR Rbr20 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR Xr300 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
- NETGEAR Xr500 Firmware: from v1.0.9.6_1.2.19 through v1.0.11.100_10.2.100
References
- https://iot-lab-fh-ooe.github.io/netgear_update_vulnerability/
- https://www.netgear.com/about/security/
- https://iot-lab-fh-ooe.github.io/netgear_update_vulnerability/
- https://www.netgear.com/about/security/
Get alerted when CVE-2020-13245 or the next vulnerability affects your stack