CVE-2019-19964

On NETGEAR GS728TPS devices through 5.3.0.35, a remote attacker having network connectivity to the web-administration panel can access part of the web panel, bypassing authentication.

Score

CVSS 3.1 2.7 Low

Status

Modified - cve@mitre.org

Published

2020-03-23

Last modified

2024-08-05

Affected products

• Gs728tps Firmware (Netgear)

References

• https://kb.netgear.com/000061738/Security-Advisory-for-Missing-Function-Level-Access-Control-on-GS728TPS-PSV-2020-0012