CVE Feed

    Dashboard / CVE / CVE-2019-20676

    CVE-2019-20676

    Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS724TPv2 before 1.1.1.29, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1.

    Published:Apr 15, 2020
    Last Modified:Nov 21, 2024
    EPS:Apr 15, 2020
    EPSS Score:0.00102
    CVSS Score:6

    Affected Products

    Vendor
    Netgear
    Product
    Fs728tlp
    Vendor
    Netgear
    Product
    Fs728tlp Firmware
    Vendor
    Netgear
    Product
    Gs105e
    Vendor
    Netgear
    Product
    Gs105e Firmware
    Vendor
    Netgear
    Product
    Gs105pe
    Vendor
    Netgear
    Product
    Gs105pe Firmware
    Vendor
    Netgear
    Product
    Gs108e
    Vendor
    Netgear
    Product
    Gs108e Firmware
    Vendor
    Netgear
    Product
    Gs108pe
    Vendor
    Netgear
    Product
    Gs108pe Firmware
    Vendor
    Netgear
    Product
    Gs110emx
    Vendor
    Netgear
    Product
    Gs110emx Firmware
    Vendor
    Netgear
    Product
    Gs116e
    Vendor
    Netgear
    Product
    Gs116e Firmware
    Vendor
    Netgear
    Product
    Gs408epp
    Vendor
    Netgear
    Product
    Gs408epp Firmware
    Vendor
    Netgear
    Product
    Gs724tp
    Vendor
    Netgear
    Product
    Gs724tp Firmware
    Vendor
    Netgear
    Product
    Gs808e
    Vendor
    Netgear
    Product
    Gs808e Firmware
    Vendor
    Netgear
    Product
    Gs810emx
    Vendor
    Netgear
    Product
    Gs810emx Firmware
    Vendor
    Netgear
    Product
    Gs908e
    Vendor
    Netgear
    Product
    Gs908e Firmware
    Vendor
    Netgear
    Product
    Gss108e
    Vendor
    Netgear
    Product
    Gss108e Firmware
    Vendor
    Netgear
    Product
    Gss108epp
    Vendor
    Netgear
    Product
    Gss108epp Firmware
    Vendor
    Netgear
    Product
    Gss116e
    Vendor
    Netgear
    Product
    Gss116e Firmware
    Vendor
    Netgear
    Product
    Jgs516pe
    Vendor
    Netgear
    Product
    Jgs516pe Firmware
    Vendor
    Netgear
    Product
    Jgs524e
    Vendor
    Netgear
    Product
    Jgs524e Firmware
    Vendor
    Netgear
    Product
    Jgs524pe
    Vendor
    Netgear
    Product
    Jgs524pe Firmware
    Vendor
    Netgear
    Product
    Xs512em
    Vendor
    Netgear
    Product
    Xs512em Firmware
    Vendor
    Netgear
    Product
    Xs708e
    Vendor
    Netgear
    Product
    Xs708e Firmware
    Vendor
    Netgear
    Product
    Xs716e
    Vendor
    Netgear
    Product
    Xs716e Firmware
    Vendor
    Netgear
    Product
    Xs724em
    Vendor
    Netgear
    Product
    Xs724em Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    Common Attack Pattern Enumeration and Classification (CAPEC)

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High