Jgs516Pe Firmware
CVE-2020-35784
HIGH
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48.
AnalysisAI
Certain NETGEAR devices are affected by lack of access control at the function level. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48. Affected products include: Netgear Jgs516Pe Firmware, Netgear Jgs524E Firmware, Netgear Jgs524Pe Firmware, Netgear Gs116E Firmware. Version information: before 2.6.0.48.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Jgs516Pe Firmware
View allNETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. Rated critical se
Certain NETGEAR devices are affected by lack of access control at the function level. Rated high severity (CVSS 8.1), th
Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.3), th
Certain NETGEAR devices are affected by lack of access control at the function level. Rated medium severity (CVSS 6.5),
NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS. Rated medium severity (CVSS 6.1), this vulnerabi
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today