CVE-2020-14429

CVE-2020-14429 describes a critical administrative credential disclosure vulnerability affecting numerous NETGEAR router and satellite models, including various MK, MR, MS, RBK, RBR, and RBS series devices running specific firmware versions prior to 1.0.4.92 or 3.2.15.25. With a CVSS score of 8.8 (High), this vulnerability allows an unauthenticated attacker on the adjacent network to gain full control over the device, leading to high confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage, suggesting a low current threat landscape. Organizations using affected NETGEAR devices should prioritize patching to mitigate this risk.