← Back to CVE List
Vulnerability Intelligence Report

CVE-2019-20676

Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS724TPv2 before 1.1.1.29, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1.

No Active Exploit Signals
CVSS Base Score
6.0
MEDIUM
Exploitability:0.8
Impact Score:5.2
EPSS Probability:0.30%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Affected Products & Versions

Vendor Product Affected Versions
netgear fs728tlp_firmware all
netgear fs728tlp all
netgear gs105e_firmware all
netgear gs105e v2
netgear gs105pe_firmware all
netgear gs105pe all
netgear gs108e_firmware all
netgear gs108e v3
netgear gs108pe_firmware all
netgear gs108pe v3
netgear gs110emx_firmware all
netgear gs110emx all
netgear gs116e_firmware all
netgear gs116e v2
netgear gs408epp_firmware all
netgear gs408epp all
netgear gs724tp_firmware all
netgear gs724tp v2
netgear gs808e_firmware all
netgear gs808e all
netgear gs810emx_firmware all
netgear gs810emx all
netgear gs908e_firmware all
netgear gs908e all
netgear gss108e_firmware all
netgear gss108e all
netgear gss108epp_firmware all
netgear gss108epp all
netgear gss116e_firmware all
netgear gss116e all
netgear jgs516pe_firmware all
netgear jgs516pe all
netgear jgs524e_firmware all
netgear jgs524e v2
netgear jgs524pe_firmware all
netgear jgs524pe all
netgear xs512em_firmware all
netgear xs512em all
netgear xs708e_firmware all
netgear xs708e v2
netgear xs716e_firmware all
netgear xs716e all
netgear xs724em_firmware all
netgear xs724em all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.302%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2020-04-15T00:00:00
Published2020-04-15T19:14:05
Last Updated2024-08-05T02:46:10

LINK COPIED TO CLIPBOARD