Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-20676

Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS724TPv2 before 1.1.1.29, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1.

Published

2020-04-15T20:15:14.333

Last Modified

2024-11-21T04:39:03.200

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.0 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-862
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System netgear fs728tlp_firmware < 1.0.1.26 Yes
Hardware netgear fs728tlp - No
Operating System netgear gs105e_firmware < 1.6.0.4 Yes
Hardware netgear gs105e v2 No
Operating System netgear gs105pe_firmware < 1.6.0.4 Yes
Hardware netgear gs105pe - No
Operating System netgear gs108e_firmware < 2.06.08 Yes
Hardware netgear gs108e v3 No
Operating System netgear gs108pe_firmware < 2.06.08 Yes
Hardware netgear gs108pe v3 No
Operating System netgear gs110emx_firmware < 1.0.1.4 Yes
Hardware netgear gs110emx - No
Operating System netgear gs116e_firmware < 2.6.0.35 Yes
Hardware netgear gs116e v2 No
Operating System netgear gs408epp_firmware < 1.0.0.15 Yes
Hardware netgear gs408epp - No
Operating System netgear gs724tp_firmware < 1.1.1.29 Yes
Hardware netgear gs724tp v2 No
Operating System netgear gs808e_firmware < 1.7.0.7 Yes
Hardware netgear gs808e - No
Operating System netgear gs810emx_firmware < 1.7.1.1 Yes
Hardware netgear gs810emx - No
Operating System netgear gs908e_firmware < 1.7.0.3 Yes
Hardware netgear gs908e - No
Operating System netgear gss108e_firmware < 1.6.0.4 Yes
Hardware netgear gss108e - No
Operating System netgear gss108epp_firmware < 1.0.0.15 Yes
Hardware netgear gss108epp - No
Operating System netgear gss116e_firmware < 1.6.0.9 Yes
Hardware netgear gss116e - No
Operating System netgear jgs516pe_firmware < 2.6.0.35 Yes
Hardware netgear jgs516pe - No
Operating System netgear jgs524e_firmware < 2.6.0.35 Yes
Hardware netgear jgs524e v2 No
Operating System netgear jgs524pe_firmware < 2.6.0.35 Yes
Hardware netgear jgs524pe - No
Operating System netgear xs512em_firmware < 1.0.1.1 Yes
Hardware netgear xs512em - No
Operating System netgear xs708e_firmware < 1.6.0.23 Yes
Hardware netgear xs708e v2 No
Operating System netgear xs716e_firmware < 1.6.0.23 Yes
Hardware netgear xs716e - No
Operating System netgear xs724em_firmware < 1.0.1.1 Yes
Hardware netgear xs724em - No
References