Description (CNA)
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NETGEAR / EX3700 | affected 0 before V1.0.0.102 |
| NETGEAR / EX6120 | affected 0 before V1.0.1.74 |
CWE
CWE-335
References
- https://www.netgear.com/support/product/ex3700
- https://www.netgear.com/support/product/ex6120
- https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory
ADP enrichment
No English description supplied.
No references supplied.