Security readout for executives and security teams
Plain-English summary
CVE-2019-20760 is an authentication bypass affecting NETGEAR R9000 routers running firmware before 1.0.4.26. A nearby attacker could potentially access protected functions without credentials. The business risk is highest where R9000 devices remain deployed and reachable on local or adjacent networks.
Executive priority
Prioritize remediation where R9000 devices protect business networks or are reachable by guests, wireless users, or shared segments. If no R9000 devices exist, document non-applicability. Treat confirmed affected devices as high priority.
Technical view
The CVSS 3.0 vector is 8.3 High: adjacent-network attack vector, low complexity, no privileges, no user interaction, unchanged scope, high confidentiality and integrity impact, and low availability impact. The provided affected metadata is sparse, but the description identifies NETGEAR R9000 firmware before 1.0.4.26.
Likely exposure
Exposure is likely limited to NETGEAR R9000 devices on firmware earlier than 1.0.4.26. The CVSS vector indicates adjacent-network reachability rather than confirmed internet-wide exposure. Confirm actual device inventory and management interface accessibility.
Exploitation context
The source bundle does not show CISA KEV listing or cited evidence of active exploitation. Risk still matters because exploitation requires no credentials, no user interaction, and low attack complexity from an adjacent network.
Researcher notes
Do not generalize this CVE to other NETGEAR models from the provided evidence. The bundle lacks CWE and CPE detail. Validation should focus on model, firmware version, and reachable administration surfaces.
Mitigation direction
- Identify all NETGEAR R9000 devices and record firmware versions.
- Update affected R9000 devices to firmware 1.0.4.26 or later per NETGEAR guidance.
- Restrict router administration access to trusted management networks.
- Disable unnecessary remote or wireless administration paths where supported.
- Check NETGEAR advisory for current vendor instructions.
Validation and detection
- Verify each R9000 reports firmware 1.0.4.26 or later.
- Confirm no R9000 management interface is reachable from untrusted networks.
- Review network diagrams for adjacent-network access to affected devices.
- Check vulnerability scanner results against actual firmware inventory.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Credential and access behavior lookup
The CVE wording references authentication or credential exposure, so valid-account and credential-access review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2019-20760 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.3 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:U/UI:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:U/UI:N2.85.5Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
8.3HighVector: CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:U/UI:N
Source materials
- CVE List V5 sourceCVE List V5
- https://kb.netgear.com/000060639/Security-Advisory-for-Authentication-Bypass-on-R9000-PSV-2018-0615CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.