How severe is CVE-2020-27872?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.8 out of 10.

What type of vulnerability is CVE-2020-27872?

This is classified as CWE-642, which is a common weakness in software security.

CVE-2020-27872

HIGH Year: 2020

CVSS v3 Score

8.8

High

CVSS v2 Score

5.8

Medium

Weakness Type

CWE-642

View all →

Vulnerability Description

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from improper state tracking in the password recovery process. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-11365.

CVE-2018-15382

HIGH

CVSS:8.6(High)

A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. The vulnerability is due to a static signing key that is present i...

CWE-6422018

CVE-2024-8754

HIGH

CVSS:8.1(High)

An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2. An improper input validation error allows attacker to s...

CWE-6422024

CVE-2019-9496

HIGH

CVSS:7.5(High)

An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode. All version of...

CWE-6422019