by Kastro
Paper/Archive/CVE-2020-26919

CVE-2020-26919

NETGEAR JGS516PE Devices — Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability

KEV · due 3 MayEPSS 57%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (CNA)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.1.991 × 2019.8Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.8CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refkb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-26919kevcisa.gov/known-exploited-vulnerabilities-catalog