Access Control Vulnerability in NETGEAR Switches
CVE-2019-20676

6MEDIUM

Key Information:

Vendor

Netgear
Status
Fs728tlp Firmware
Vendor
CVE Published:
15 April 2020

What is CVE-2019-20676?

Certain NETGEAR switches exhibit a lack of access control at the function level, which may allow unauthorized access to device functionality. This issue affects numerous models across various versions, potentially compromising the integrity of network operations. Users are advised to update their devices to mitigate risks associated with this vulnerability.

References

https://kb.netgear.com/000061463/Security-Advisory-for-Mi...
x_refsource_CONFIRM

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.