NETGEAR · JGS516PE Devices
CVE-2020-26919
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
Exploited in attacks
Critical 9.8 Attack chance: 57%
What it is
NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.
CISA: Netgear JGS516PE devices contain a missing function level access control vulnerability.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 3, 2022
More exploited flaws from NETGEAR
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 8, 2022 | Exposure of Sensitive Information | Multiple Devices | High 8.1 | 89% |
| Jun 8, 2022 | Buffer Overflow | Multiple Devices | Critical 9.8 | 46% |
| Mar 25, 2022 | Multiple WAP Devices Command Injection | Wireless Access Point (WAP) Devices | Critical 9.8 | 98% |
| Mar 25, 2022 | OS Command Injection | DGN2200 Devices | High 8.8 | 73% |
| Mar 25, 2022 | Buffer Overflow | WNR2000v5 Router | Critical 9.8 | 83% |
| Mar 7, 2022 | Remote Code Execution | Multiple Routers | High 8.8 | 99.8% |
| Mar 7, 2022 | DGN2200 Remote Code Execution | Wireless Router DGN2200 | Critical 9.8 | 69% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.