CVE-2019-20676
Severity Score
6.0
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS724TPv2 before 1.1.1.29, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1.
Determinados dispositivos NETGEAR están afectados por una falta de control de acceso en el nivel de función. Esto afecta a FS728TLP versiones anteriores a 1.0.1.26, GS105Ev2 versiones anteriores a 1.6.0.4, GS105PE versiones anteriores a 1.6.0.4, GS108Ev3 versiones anteriores a 2.06.08, GS108PEv3 versiones anteriores a 2.06.08, GS110EMX versiones anteriores a 1.0.1.4, GS116Ev2 versiones anteriores a 2.6.0.35, GS408EPP versiones anteriores a 1.0.0.15, GS724TPv2 versiones anteriores a 1.1.1.29, GS808E versiones anteriores a 1.7.0.7, GS810EMX versiones anteriores a 1.7.1.1, GS908E versiones anteriores a 1.7.0.3, GSS108E versiones anteriores a 1.6.0.4, GSS108EPP versiones anteriores a 1.0.0.15, GSS116E versiones anteriores a 1.6.0.9, JGS516PE versiones anteriores a 2.6.0.35, JGS524Ev2 versiones anteriores a 2.6.0.35, JGS524PE versiones anteriores a 2.6.0.35, XS512EM versiones anteriores a 1.0.1.1, XS708Ev2 versiones anteriores a 1.6.0.23, XS716E versiones anteriores a 1.6.0.23 y XS724EM versiones anteriores a 1.0.1.1.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-04-15 CVE Reserved
- 2020-04-15 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-862: Missing Authorization
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Fs728tlp Firmware Search vendor "Netgear" for product "Fs728tlp Firmware" | < 1.0.1.26 Search vendor "Netgear" for product "Fs728tlp Firmware" and version " < 1.0.1.26" | - |
Affected
| in | Netgear Search vendor "Netgear" | Fs728tlp Search vendor "Netgear" for product "Fs728tlp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs105e Firmware Search vendor "Netgear" for product "Gs105e Firmware" | < 1.6.0.4 Search vendor "Netgear" for product "Gs105e Firmware" and version " < 1.6.0.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs105e Search vendor "Netgear" for product "Gs105e" | v2 Search vendor "Netgear" for product "Gs105e" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs105pe Firmware Search vendor "Netgear" for product "Gs105pe Firmware" | < 1.6.0.4 Search vendor "Netgear" for product "Gs105pe Firmware" and version " < 1.6.0.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs105pe Search vendor "Netgear" for product "Gs105pe" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs108e Firmware Search vendor "Netgear" for product "Gs108e Firmware" | < 2.06.08 Search vendor "Netgear" for product "Gs108e Firmware" and version " < 2.06.08" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs108e Search vendor "Netgear" for product "Gs108e" | v3 Search vendor "Netgear" for product "Gs108e" and version "v3" | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs108pe Firmware Search vendor "Netgear" for product "Gs108pe Firmware" | < 2.06.08 Search vendor "Netgear" for product "Gs108pe Firmware" and version " < 2.06.08" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs108pe Search vendor "Netgear" for product "Gs108pe" | v3 Search vendor "Netgear" for product "Gs108pe" and version "v3" | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs110emx Firmware Search vendor "Netgear" for product "Gs110emx Firmware" | < 1.0.1.4 Search vendor "Netgear" for product "Gs110emx Firmware" and version " < 1.0.1.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs110emx Search vendor "Netgear" for product "Gs110emx" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs116e Firmware Search vendor "Netgear" for product "Gs116e Firmware" | < 2.6.0.35 Search vendor "Netgear" for product "Gs116e Firmware" and version " < 2.6.0.35" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs116e Search vendor "Netgear" for product "Gs116e" | v2 Search vendor "Netgear" for product "Gs116e" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs408epp Firmware Search vendor "Netgear" for product "Gs408epp Firmware" | < 1.0.0.15 Search vendor "Netgear" for product "Gs408epp Firmware" and version " < 1.0.0.15" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs408epp Search vendor "Netgear" for product "Gs408epp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs724tp Firmware Search vendor "Netgear" for product "Gs724tp Firmware" | < 1.1.1.29 Search vendor "Netgear" for product "Gs724tp Firmware" and version " < 1.1.1.29" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs724tp Search vendor "Netgear" for product "Gs724tp" | v2 Search vendor "Netgear" for product "Gs724tp" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs808e Firmware Search vendor "Netgear" for product "Gs808e Firmware" | < 1.7.0.7 Search vendor "Netgear" for product "Gs808e Firmware" and version " < 1.7.0.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs808e Search vendor "Netgear" for product "Gs808e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs810emx Firmware Search vendor "Netgear" for product "Gs810emx Firmware" | < 1.7.1.1 Search vendor "Netgear" for product "Gs810emx Firmware" and version " < 1.7.1.1" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs810emx Search vendor "Netgear" for product "Gs810emx" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs908e Firmware Search vendor "Netgear" for product "Gs908e Firmware" | < 1.7.0.3 Search vendor "Netgear" for product "Gs908e Firmware" and version " < 1.7.0.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs908e Search vendor "Netgear" for product "Gs908e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gss108e Firmware Search vendor "Netgear" for product "Gss108e Firmware" | < 1.6.0.4 Search vendor "Netgear" for product "Gss108e Firmware" and version " < 1.6.0.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gss108e Search vendor "Netgear" for product "Gss108e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gss108epp Firmware Search vendor "Netgear" for product "Gss108epp Firmware" | < 1.0.0.15 Search vendor "Netgear" for product "Gss108epp Firmware" and version " < 1.0.0.15" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gss108epp Search vendor "Netgear" for product "Gss108epp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gss116e Firmware Search vendor "Netgear" for product "Gss116e Firmware" | < 1.6.0.9 Search vendor "Netgear" for product "Gss116e Firmware" and version " < 1.6.0.9" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gss116e Search vendor "Netgear" for product "Gss116e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Jgs516pe Firmware Search vendor "Netgear" for product "Jgs516pe Firmware" | < 2.6.0.35 Search vendor "Netgear" for product "Jgs516pe Firmware" and version " < 2.6.0.35" | - |
Affected
| in | Netgear Search vendor "Netgear" | Jgs516pe Search vendor "Netgear" for product "Jgs516pe" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Jgs524e Firmware Search vendor "Netgear" for product "Jgs524e Firmware" | < 2.6.0.35 Search vendor "Netgear" for product "Jgs524e Firmware" and version " < 2.6.0.35" | - |
Affected
| in | Netgear Search vendor "Netgear" | Jgs524e Search vendor "Netgear" for product "Jgs524e" | v2 Search vendor "Netgear" for product "Jgs524e" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Jgs524pe Firmware Search vendor "Netgear" for product "Jgs524pe Firmware" | < 2.6.0.35 Search vendor "Netgear" for product "Jgs524pe Firmware" and version " < 2.6.0.35" | - |
Affected
| in | Netgear Search vendor "Netgear" | Jgs524pe Search vendor "Netgear" for product "Jgs524pe" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Xs512em Firmware Search vendor "Netgear" for product "Xs512em Firmware" | < 1.0.1.1 Search vendor "Netgear" for product "Xs512em Firmware" and version " < 1.0.1.1" | - |
Affected
| in | Netgear Search vendor "Netgear" | Xs512em Search vendor "Netgear" for product "Xs512em" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Xs708e Firmware Search vendor "Netgear" for product "Xs708e Firmware" | < 1.6.0.23 Search vendor "Netgear" for product "Xs708e Firmware" and version " < 1.6.0.23" | - |
Affected
| in | Netgear Search vendor "Netgear" | Xs708e Search vendor "Netgear" for product "Xs708e" | v2 Search vendor "Netgear" for product "Xs708e" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Xs716e Firmware Search vendor "Netgear" for product "Xs716e Firmware" | < 1.6.0.23 Search vendor "Netgear" for product "Xs716e Firmware" and version " < 1.6.0.23" | - |
Affected
| in | Netgear Search vendor "Netgear" | Xs716e Search vendor "Netgear" for product "Xs716e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Xs724em Firmware Search vendor "Netgear" for product "Xs724em Firmware" | < 1.0.1.1 Search vendor "Netgear" for product "Xs724em Firmware" and version " < 1.0.1.1" | - |
Affected
| in | Netgear Search vendor "Netgear" | Xs724em Search vendor "Netgear" for product "Xs724em" | - | - |
Safe
|