Lucene search

K
cvelistMitreCVELIST:CVE-2020-35784
HistoryDec 29, 2020 - 11:40 p.m.

CVE-2020-35784

2020-12-2923:40:55
mitre
www.cve.org
4
netgear
access control
jgs516pe
jgs524pe
jgs524ev2
gs116ev2
cve-2020-35784

CVSS3

6.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

EPSS

0.001

Percentile

36.9%

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48.

CVSS3

6.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

EPSS

0.001

Percentile

36.9%

Related for CVELIST:CVE-2020-35784