Lucene search

[email protected]CVE-2019-20694

HistoryApr 16, 2020 - 7:15 p.m.

CVE-2019-20694

2020-04-1619:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

netgear

sensitive information disclosure

cve-2019-20694

nvd

gs728tp

gs728tppv2

gs728tpv2

gs752tpp

gs752tpv2

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

53.3%

JSON

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects GS728TP before 6.0.0.48, GS728TPPv2 before 6.0.0.48, GS728TPv2 before 6.0.0.48, GS752TPP before 6.0.0.48, and GS752TPv2 before 6.0.0.48.

CPENameOperatorVersion
netgear:gs728tp_firmwarenetgear gs728tp firmwarelt6.0.0.48
netgear:gs728tpp_firmwarenetgear gs728tpp firmwarelt6.0.0.48
netgear:gs752tpp_firmwarenetgear gs752tpp firmwarelt6.0.0.48
netgear:gs752tp_firmwarenetgear gs752tp firmwarelt6.0.0.48

CPE	Name	Operator	Version
netgear:gs728tp_firmware	netgear gs728tp firmware	lt	6.0.0.48
netgear:gs728tpp_firmware	netgear gs728tpp firmware	lt	6.0.0.48
netgear:gs752tpp_firmware	netgear gs752tpp firmware	lt	6.0.0.48
netgear:gs752tp_firmware	netgear gs752tp firmware	lt	6.0.0.48

References

kb.netgear.com/000061235/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Switches-PSV-2019-0059

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

53.3%

JSON

Related for CVE-2019-20694

prion1