CVEvulnerability

CVE-2019-20676

6.0 MEDIUM Published 2020-04-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 3.0 ([email protected])
6.0 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-862

Description

Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS724TPv2 before 1.1.1.29, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1.

Affected configurations

• netgear fs728tlp firmware (< 1.0.1.26) • netgear gs105e firmware (< 1.6.0.4) • netgear gs105pe firmware (< 1.6.0.4) • netgear gs108e firmware (< 2.06.08) • netgear gs108pe firmware (< 2.06.08) • netgear gs110emx firmware (< 1.0.1.4) • netgear gs116e firmware (< 2.6.0.35) • netgear gs408epp firmware (< 1.0.0.15) • netgear gs724tp firmware (< 1.1.1.29) • netgear gs808e firmware (< 1.7.0.7) • netgear gs810emx firmware (< 1.7.1.1) • netgear gs908e firmware (< 1.7.0.3) • netgear gss108e firmware (< 1.6.0.4) • netgear gss108epp firmware (< 1.0.0.15) • netgear gss116e firmware (< 1.6.0.9) • netgear jgs516pe firmware (< 2.6.0.35) • netgear jgs524e firmware (< 2.6.0.35) • netgear jgs524pe firmware (< 2.6.0.35) • netgear xs512em firmware (< 1.0.1.1) • netgear xs708e firmware (< 1.6.0.23) • netgear xs716e firmware (< 1.6.0.23) • netgear xs724em firmware (< 1.0.1.1)

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References