critical9.8Known exploited
CVE-2020-26919
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.
Apply updates per vendor instructions.
Impact
NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Jgs516pe Firmware | before 2.6.0.43 |
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377
- https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-26919