CVE-2019-20699
Critical
Description
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS408EPP before 1.0.0.15, GS808E before 1.7.0.7, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, and GSS108EPP before 1.0.0.15.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Netgear Gs105e Firmware
PublishedApr 16, 2020
First seenApr 16, 2020
How to fix
Update
- netgear gs105e_firmware1.6.0.4 or later
- netgear gs105pe_firmware1.6.0.4 or later
- netgear gs408epp_firmware1.0.0.15 or later
- netgear gs808e_firmware1.7.0.7 or later
- netgear gs908e_firmware1.7.0.3 or later
- netgear gss108e_firmware1.6.0.4 or later
- netgear gss108epp_firmware1.0.0.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear gs105e_firmware | v < 1.6.0.4 | 1.6.0.4 |
| netgear gs105pe_firmware | v < 1.6.0.4 | 1.6.0.4 |
| netgear gs408epp_firmware | v < 1.0.0.15 | 1.0.0.15 |
| netgear gs808e_firmware | v < 1.7.0.7 | 1.7.0.7 |
| netgear gs908e_firmware | v < 1.7.0.3 | 1.7.0.3 |
| netgear gss108e_firmware | v < 1.6.0.4 | 1.6.0.4 |
| netgear gss108epp_firmware | v < 1.0.0.15 | 1.0.0.15 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.