Lucene search

MitreCVE-2020-35782

HistoryDec 30, 2020 - 12:15 a.m.

CVE-2020-35782

2020-12-3000:15:13

mitre

web.nvd.nist.gov

netgear

access control

vulnerability

cve-2020-35782

nvd

CVSS2

7.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:C/A:C

CVSS3

8.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

47.8%

JSON

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. The TFTP firmware update mechanism does not properly implement firmware validations, allowing remote attackers to write arbitrary data to internal memory.

Affected configurations

Nvd

Node

netgearjgs516pe_firmwareRange<2.6.0.48

AND

netgearjgs516peMatch-

Node

netgearjgs524e_firmwareRange<2.6.0.48

AND

netgearjgs524eMatchv2

Node

netgearjgs524pe_firmwareRange<2.6.0.48

AND

netgearjgs524peMatch-

Node

netgeargs116e_firmwareRange<2.6.0.48

AND

netgeargs116eMatchv2

VendorProductVersionCPE
netgearjgs516pe_firmware*cpe:2.3:o:netgear:jgs516pe_firmware:*:*:*:*:*:*:*:*
netgearjgs516pe-cpe:2.3:h:netgear:jgs516pe:-:*:*:*:*:*:*:*
netgearjgs524e_firmware*cpe:2.3:o:netgear:jgs524e_firmware:*:*:*:*:*:*:*:*
netgearjgs524ev2cpe:2.3:h:netgear:jgs524e:v2:*:*:*:*:*:*:*
netgearjgs524pe_firmware*cpe:2.3:o:netgear:jgs524pe_firmware:*:*:*:*:*:*:*:*
netgearjgs524pe-cpe:2.3:h:netgear:jgs524pe:-:*:*:*:*:*:*:*
netgeargs116e_firmware*cpe:2.3:o:netgear:gs116e_firmware:*:*:*:*:*:*:*:*
netgeargs116ev2cpe:2.3:h:netgear:gs116e:v2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	jgs516pe_firmware	*	cpe:2.3:o:netgear:jgs516pe_firmware::::::::
netgear	jgs516pe	-	cpe:2.3:h:netgear:jgs516pe:-:::::::*
netgear	jgs524e_firmware	*	cpe:2.3:o:netgear:jgs524e_firmware::::::::
netgear	jgs524e	v2	cpe:2.3:h:netgear:jgs524e:v2:::::::*
netgear	jgs524pe_firmware	*	cpe:2.3:o:netgear:jgs524pe_firmware::::::::
netgear	jgs524pe	-	cpe:2.3:h:netgear:jgs524pe:-:::::::*
netgear	gs116e_firmware	*	cpe:2.3:o:netgear:gs116e_firmware::::::::
netgear	gs116e	v2	cpe:2.3:h:netgear:gs116e:v2:::::::*

References

kb.netgear.com/000062636/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0378

research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/

CVSS2

7.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:C/A:C

CVSS3

8.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

47.8%

JSON

Related for CVE-2020-35782