CVEvulnerability

CVE-2019-20699

9.8 CRITICAL Published 2020-04-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-120

Description

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS408EPP before 1.0.0.15, GS808E before 1.7.0.7, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, and GSS108EPP before 1.0.0.15.

Affected configurations

• netgear gs105e firmware (< 1.6.0.4) • netgear gs105pe firmware (< 1.6.0.4) • netgear gs408epp firmware (< 1.0.0.15) • netgear gs808e firmware (< 1.7.0.7) • netgear gs908e firmware (< 1.7.0.3) • netgear gss108e firmware (< 1.6.0.4) • netgear gss108epp firmware (< 1.0.0.15)

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References