CVE-2019-20699: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4…

PriorityP358critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.14%

62.9th percentile

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS408EPP before 1.0.0.15, GS808E before 1.7.0.7, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, and GSS108EPP before 1.0.0.15.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
netgear	gs105e_firmware	< 1.6.0.4	1.6.0.4
netgear	gs105pe_firmware	< 1.6.0.4	1.6.0.4
netgear	gs408epp_firmware	< 1.0.0.15	1.0.0.15
netgear	gs808e_firmware	< 1.7.0.7	1.7.0.7
netgear	gs908e_firmware	< 1.7.0.3	1.7.0.3
netgear	gss108e_firmware	< 1.6.0.4	1.6.0.4
netgear	gss108epp_firmware	< 1.0.0.15	1.0.0.15

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.