CVE-2020-35784

3 documents3 sources
Severity
7.2HIGH
EPSS
0.3%
top 45.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Netgear Gs116e FirmwareNetgear Jgs516pe FirmwareNetgear Jgs524e Firmware+1 more
Timeline
PublishedDec 30
Latest updateMay 24

Description

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:LExploitability: 0.7 | Impact: 5.5

Affected Packages4 packages

▶NVDnetgear/gs116e_firmware< 2.6.0.48
▶NVDnetgear/jgs524e_firmware< 2.6.0.48

🔴Vulnerability Details

2
GHSA
GHSA-pf65-88c2-hrfc: Certain NETGEAR devices are affected by lack of access control at the function level↗2022-05-24
▶
CVEList
CVE-2020-35784: Certain NETGEAR devices are affected by lack of access control at the function level↗2020-12-29
▶
CVE-2020-35784 (HIGH CVSS 7.2) | Certain NETGEAR devices are affecte | cvebase.io