Threat Investigation
Request a demo

CVE-2019-20676

Medium

Description

Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS724TPv2 before 1.1.1.29, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1.

SeverityMedium
CVSS6.0
Exploit probability—
ProductNetgear Fs728tlp Firmware
PublishedApr 15, 2020
First seenApr 15, 2020

How to fix

Update
  • netgear fs728tlp_firmware1.0.1.26 or later
  • netgear gs105e_firmware1.6.0.4 or later
  • netgear gs105pe_firmware1.6.0.4 or later
  • netgear gs108e_firmware2.06.08 or later
  • netgear gs108pe_firmware2.06.08 or later
  • netgear gs110emx_firmware1.0.1.4 or later
  • netgear gs116e_firmware2.6.0.35 or later
  • netgear gs408epp_firmware1.0.0.15 or later
  • netgear gs724tp_firmware1.1.1.29 or later
  • netgear gs808e_firmware1.7.0.7 or later
  • netgear gs810emx_firmware1.7.1.1 or later
  • netgear gs908e_firmware1.7.0.3 or later

Affected products

ProductAffected versionsFixed in
netgear fs728tlp_firmwarev < 1.0.1.261.0.1.26
netgear gs105e_firmwarev < 1.6.0.41.6.0.4
netgear gs105pe_firmwarev < 1.6.0.41.6.0.4
netgear gs108e_firmwarev < 2.06.082.06.08
netgear gs108pe_firmwarev < 2.06.082.06.08
netgear gs110emx_firmwarev < 1.0.1.41.0.1.4
netgear gs116e_firmwarev < 2.6.0.352.6.0.35
netgear gs408epp_firmwarev < 1.0.0.151.0.0.15
netgear gs724tp_firmwarev < 1.1.1.291.1.1.29
netgear gs808e_firmwarev < 1.7.0.71.7.0.7
netgear gs810emx_firmwarev < 1.7.1.11.7.1.1
netgear gs908e_firmwarev < 1.7.0.31.7.0.3
netgear gss108e_firmwarev < 1.6.0.41.6.0.4
netgear gss108epp_firmwarev < 1.0.0.151.0.0.15
netgear gss116e_firmwarev < 1.6.0.91.6.0.9
netgear jgs516pe_firmwarev < 2.6.0.352.6.0.35
netgear jgs524e_firmwarev < 2.6.0.352.6.0.35
netgear jgs524pe_firmwarev < 2.6.0.352.6.0.35
netgear xs512em_firmwarev < 1.0.1.11.0.1.1
netgear xs708e_firmwarev < 1.6.0.231.6.0.23
netgear xs716e_firmwarev < 1.6.0.231.6.0.23
netgear xs724em_firmwarev < 1.0.1.11.0.1.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.