First published: Tue Dec 29 2020(Updated: )
Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear JGS516PE Firmware | <2.6.0.48 | |
Netgear JGS516PE Firmware | ||
Netgear JGS524E Firmware | <2.6.0.48 | |
Netgear JGS524E Firmware | =v2 | |
Netgear JGS524PE | <2.6.0.48 | |
Netgear Jgs524pe Firmware | ||
Netgear GS116E Firmware | <2.6.0.48 | |
Netgear GS116E | =v2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-35784 is considered a moderate severity vulnerability due to the lack of access control at the function level.
To fix CVE-2020-35784, upgrade the affected NETGEAR devices to firmware version 2.6.0.48 or later.
CVE-2020-35784 affects the JGS516PE, JGS524PE, JGS524Ev2, and GS116Ev2 models before firmware version 2.6.0.48.
CVE-2020-35784 is classified as an access control vulnerability at the function level.
Yes, CVE-2020-35784 is a firmware issue impacting certain versions of NETGEAR devices.