CVE-2020-35784

published 2020-12-30

CVE-2020-35784: Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48…

high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
netgear	gs116e_firmware	< 2.6.0.48	2.6.0.48
netgear	jgs516pe_firmware	< 2.6.0.48	2.6.0.48
netgear	jgs524e_firmware	< 2.6.0.48	2.6.0.48
netgear	jgs524pe_firmware	< 2.6.0.48	2.6.0.48