SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-20751

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

MEDIUM 6.8EPSS 0.60%

Does this matter?

Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.

Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.60, DM200 before 1.0.0.61, EX2700 before 1.0.1.48, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.72, EX8000 before 1.0.1.180, R7800 before 1.0.2.52, R8900 before 1.0.4.26, R9000 before 1.0.4.26, WN2000RPTv3 before 1.0.1.32, WN3000RPv2 before 1.0.0.68, WN3000RPv3 before 1.0.2.70, WN3100RPv2 before 1.0.0.66, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, and WNR2000v5 before 1.0.0.68.

CVSS 3.1
6.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.60% probability · 48th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-787
Affected
netgear/d6100 firmware · netgear/dm200 firmware · netgear/ex2700 firmware · netgear/ex6100 firmware · netgear/ex6150 firmware · netgear/ex6200 firmware · netgear/ex8000 firmware · netgear/r7800 firmware · netgear/r8900 firmware · netgear/r9000 firmware · netgear/wn2000rpt firmware · netgear/wn3000rp firmware · netgear/wn3100rp firmware · netgear/wndr4300 firmware · netgear/wndr4500 firmware · netgear/wnr2000 firmware
Source
cve@mitre.org
EPSS trend
0%3%5%26 October 2026: 0.60%26 October 202626 October 2026

EPSS 0.6% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.