CVE-2019-20676
Estado: ModificadaMedia (6)—
Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS724TPv2 before 1.1.1.29, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- Puntuación base: 6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.30%
- Percentil entre todas las CVEs puntuadas: 21
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (22)
Netgear — Fs728tlp FirmwareNetgear — Gs105e FirmwareNetgear — Gs105pe FirmwareNetgear — Gs108e FirmwareNetgear — Gs108pe FirmwareNetgear — Gs110emx FirmwareNetgear — Gs116e FirmwareNetgear — Gs408epp FirmwareNetgear — Gs724tp FirmwareNetgear — Gs808e FirmwareNetgear — Gs810emx FirmwareNetgear — Gs908e FirmwareNetgear — Gss108e FirmwareNetgear — Gss108epp FirmwareNetgear — Gss116e FirmwareNetgear — Jgs516pe FirmwareNetgear — Jgs524e FirmwareNetgear — Jgs524pe FirmwareNetgear — Xs512em FirmwareNetgear — Xs708e FirmwareNetgear — Xs716e FirmwareNetgear — Xs724em Firmware
CWE
- CWE-862
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-20676",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 4.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "cve@mitre.org",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.2,
"exploitabilityScore": 0.8
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.2,
"exploitabilityScore": 0.8
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2020-04-15T20:15:14.333",
"references": [
{
"url": "https://kb.netgear.com/000061463/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Switches-PSV-2018-0542",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://kb.netgear.com/000061463/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Switches-PSV-2018-0542",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS724TPv2 before 1.1.1.29, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1."
},
{
"lang": "es",
"value": "Determinados dispositivos NETGEAR están afectados por una falta de control de acceso en el nivel de función. Esto afecta a FS728TLP versiones anteriores a 1.0.1.26, GS105Ev2 versiones anteriores a 1.6.0.4, GS105PE versiones anteriores a 1.6.0.4, GS108Ev3 versiones anteriores a 2.06.08, GS108PEv3 versiones anteriores a 2.06.08, GS110EMX versiones anteriores a 1.0.1.4, GS116Ev2 versiones anteriores a 2.6.0.35, GS408EPP versiones anteriores a 1.0.0.15, GS724TPv2 versiones anteriores a 1.1.1.29, GS808E versiones anteriores a 1.7.0.7, GS810EMX versiones anteriores a 1.7.1.1, GS908E versiones anteriores a 1.7.0.3, GSS108E versiones anteriores a 1.6.0.4, GSS108EPP versiones anteriores a 1.0.0.15, GSS116E versiones anteriores a 1.6.0.9, JGS516PE versiones anteriores a 2.6.0.35, JGS524Ev2 versiones anteriores a 2.6.0.35, JGS524PE versiones anteriores a 2.6.0.35, XS512EM versiones anteriores a 1.0.1.1, XS708Ev2 versiones anteriores a 1.6.0.23, XS716E versiones anteriores a 1.6.0.23 y XS724EM versiones anteriores a 1.0.1.1."
}
],
"lastModified": "2026-06-17T02:30:55.943",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:fs728tlp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A5F92D9-065E-40AA-BDBA-73E2671C961A",
"versionEndExcluding": "1.0.1.26"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:fs728tlp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F4EEBDAE-AE10-43F2-BB8A-73CE293848D9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs105e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBF196D1-A0B3-443D-88A0-AA2E096C57F6",
"versionEndExcluding": "1.6.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs105e:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DD993BAB-DF89-41AB-936B-9C6F280BAE1D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs105pe_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0E0CE18-6EA8-41F5-8984-1FEB91561127",
"versionEndExcluding": "1.6.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs105pe:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "211D1DBE-5D7A-4309-A125-126AF2A16647"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs108e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDE4B26A-8305-40B9-8A70-59626881EEEA",
"versionEndExcluding": "2.06.08"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs108e:v3:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5579C6E3-866F-4E6A-BD4C-0A1239DE5699"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs108pe_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "114E9F01-DD89-488E-9D95-33C420AEC7CD",
"versionEndExcluding": "2.06.08"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs108pe:v3:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3DA97C4B-C592-4418-8F3B-24C891D3C830"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs110emx_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D83E3054-7E97-49C1-B694-B0118200ACEC",
"versionEndExcluding": "1.0.1.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs110emx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0E1EEC50-F8C6-4B34-AB0A-EC5466FF7A74"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs116e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8377DD76-5028-4BB1-B670-453ECCB9BE2E",
"versionEndExcluding": "2.6.0.35"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs116e:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DA5EF92-9B28-4C81-8A95-C5BCEC19591A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs408epp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A902F828-C55A-45B9-81D5-641FFE0ACD2D",
"versionEndExcluding": "1.0.0.15"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs408epp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "86E8C803-F6E4-4CFD-B9BA-D83A7C5269E9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs724tp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0515B176-5785-4ABB-BE14-7E2B1766325A",
"versionEndExcluding": "1.1.1.29"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs724tp:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E871CCB4-8093-44AE-B289-CF81F82A9DB8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs808e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0DC63B1-22DB-4509-A468-9D1B63C997E7",
"versionEndExcluding": "1.7.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs808e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4FBE41AE-2001-4539-9F63-710EDEE42629"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs810emx_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8E8C971-788E-4D6D-B8BB-B65B2813EE5C",
"versionEndExcluding": "1.7.1.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs810emx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "91F71973-C209-4401-B887-9399F9552D7D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gs908e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D4E120D-3609-40F0-86B3-E7A2BC774D40",
"versionEndExcluding": "1.7.0.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gs908e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F6CA61D2-1B85-4C5F-86CA-AB1F877243FA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gss108e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3350D6E6-522C-4D9F-9D74-EE3A2FB9177E",
"versionEndExcluding": "1.6.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gss108e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8244C4BA-F166-4C32-BF43-0964CD99921B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gss108epp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2106BBF-F216-4CBE-915C-B9680BB8B4EC",
"versionEndExcluding": "1.0.0.15"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gss108epp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2EF32417-92E9-4D8B-913A-539A473A2673"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:gss116e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5987DE76-B142-43AD-A06A-EED97FBEDC25",
"versionEndExcluding": "1.6.0.9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:gss116e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0C7E2A39-F250-49EB-AE39-A1745B8F1569"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:jgs516pe_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C97166D-7ED9-477D-A246-113BAFFED0C5",
"versionEndExcluding": "2.6.0.35"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:jgs516pe:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DCBC0DAB-226E-4C95-9818-7758D37EFD10"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:jgs524e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "573A1DF4-2441-4B8C-9A01-6CC6BAF2B48E",
"versionEndExcluding": "2.6.0.35"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:jgs524e:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CFF899BD-AA1E-4C47-BCFD-5E32F75F538A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:jgs524pe_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32DC5F31-3757-4739-8A10-F44DA2637080",
"versionEndExcluding": "2.6.0.35"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:jgs524pe:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D4A32288-19B5-4A8F-B883-FCC326B7032D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:xs512em_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A39A00BE-2EAA-4893-AE8C-EB5B15C1E8DC",
"versionEndExcluding": "1.0.1.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:xs512em:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "48FCC8F7-1043-4069-924D-0124FE5D10B0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:xs708e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43A13AEB-F9FC-4F7D-812E-F28CE368F9E8",
"versionEndExcluding": "1.6.0.23"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:xs708e:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FD93BF51-A52C-422F-BB05-63CF9E97D3B7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:xs716e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F96E693-D402-4ECB-B2E1-28A06810B9F4",
"versionEndExcluding": "1.6.0.23"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:xs716e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6C6BBBDF-8E4C-42B3-9B23-C0970F5C4B7B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:xs724em_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C642EB2-F5F9-43B9-8F14-EF70F2429A46",
"versionEndExcluding": "1.0.1.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:xs724em:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "30918F59-D8C5-4A49-A10D-A5703261CCE1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}