CVE-2019-20699
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS408EPP before 1.0.0.15, GS808E before 1.7.0.7, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, and GSS108EPP before 1.0.0.15.
Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer por parte de un atacante no autenticado. Esto afecta a GS105Ev2 versiones anteriores a 1.6.0.4, GS105PE versiones anteriores a 1.6.0.4, GS408EPP versiones anteriores a 1.0.0.15, GS808E versiones anteriores a 1.7.0.7, GS908E versiones anteriores a 1.7.0.3, GSS108E versiones anteriores a 1.6.0.4, y GSS108EPP versiones anteriores a 1.0.0.15.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-04-15 CVE Reserved
- 2020-04-16 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Gs105e Firmware Search vendor "Netgear" for product "Gs105e Firmware" | < 1.6.0.4 Search vendor "Netgear" for product "Gs105e Firmware" and version " < 1.6.0.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs105e Search vendor "Netgear" for product "Gs105e" | v2 Search vendor "Netgear" for product "Gs105e" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs105pe Firmware Search vendor "Netgear" for product "Gs105pe Firmware" | < 1.6.0.4 Search vendor "Netgear" for product "Gs105pe Firmware" and version " < 1.6.0.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs105pe Search vendor "Netgear" for product "Gs105pe" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs408epp Firmware Search vendor "Netgear" for product "Gs408epp Firmware" | < 1.0.0.15 Search vendor "Netgear" for product "Gs408epp Firmware" and version " < 1.0.0.15" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs408epp Search vendor "Netgear" for product "Gs408epp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs808e Firmware Search vendor "Netgear" for product "Gs808e Firmware" | < 1.7.0.7 Search vendor "Netgear" for product "Gs808e Firmware" and version " < 1.7.0.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs808e Search vendor "Netgear" for product "Gs808e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs908e Firmware Search vendor "Netgear" for product "Gs908e Firmware" | < 1.7.0.3 Search vendor "Netgear" for product "Gs908e Firmware" and version " < 1.7.0.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs908e Search vendor "Netgear" for product "Gs908e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gss108e Firmware Search vendor "Netgear" for product "Gss108e Firmware" | < 1.6.0.4 Search vendor "Netgear" for product "Gss108e Firmware" and version " < 1.6.0.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gss108e Search vendor "Netgear" for product "Gss108e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gss108epp Firmware Search vendor "Netgear" for product "Gss108epp Firmware" | < 1.0.0.15 Search vendor "Netgear" for product "Gss108epp Firmware" and version " < 1.0.0.15" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gss108epp Search vendor "Netgear" for product "Gss108epp" | - | - |
Safe
|