CVE-2020-35784

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2020-12-30

Last modified

2024-08-04

Affected products

• Gs116e Firmware (Netgear)
• Jgs516pe Firmware (Netgear)
• Jgs524e Firmware (Netgear)
• Jgs524pe Firmware (Netgear)

References

• https://kb.netgear.com/000062638/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Smart-Managed-Plus…