CVE-2020-35784 in JGS516PE

Summary

by MITRE • 12/30/2020

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48.

Be aware that VulDB is the high quality source for vulnerability data.

• Disclosure: 12/30/2020
• Moderation: accepted
• Entry: VDB-166940
• CPE: ready
• CWE: CWE-264 (confirmed)
• CVSS: 4.1 (VulDB)
• EPSS: 0.00843
• KEV: no
• Activities: very low
• Sector: Hostingprovider, Hospital, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-35784
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-35784
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-35784/