CVE-2019-20658 : Certain NETGEAR devices are affected by disclosure of sensitive information. Thi

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS108Ev3 before 2.06.08, GS108PEv3 before 2.06.08, GS110EMX before 1.0.1.4, GS116Ev2 before 2.6.0.35, GS408EPP before 1.0.0.15, GS808E before 1.7.0.7, GS810EMX before 1.7.1.1, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, GSS108EPP before 1.0.0.15, GSS116E before 1.6.0.9, JGS516PE before 2.6.0.35, JGS524Ev2 before 2.6.0.35, JGS524PE before 2.6.0.35, XS512EM before 1.0.1.1, XS708Ev2 before 1.6.0.23, XS716E before 1.6.0.23, and XS724EM before 1.0.1.1.

Published 2020-04-15 19:15:13

Updated 2021-07-21 11:39:24

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2019-20658

Netgear » Gs108pe Firmware
Versions before (<) 2.06.08
cpe:2.3:o:netgear:gs108pe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs108pe » Version: V3
Netgear » Jgs516pe Firmware
Versions before (<) 2.6.0.35
cpe:2.3:o:netgear:jgs516pe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Jgs516pe » Version: N/A
Netgear » Jgs524e Firmware
Versions before (<) 2.6.0.35
cpe:2.3:o:netgear:jgs524e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Jgs524e » Version: V2
Netgear » Jgs524pe Firmware
Versions before (<) 2.6.0.35
cpe:2.3:o:netgear:jgs524pe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Jgs524pe » Version: N/A
Netgear » Gs105e Firmware
Versions before (<) 1.6.0.4
cpe:2.3:o:netgear:gs105e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs105e » Version: V2
Netgear » Gs105pe Firmware
Versions before (<) 1.6.0.4
cpe:2.3:o:netgear:gs105pe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs105pe » Version: N/A
Netgear » Gs108e Firmware
Versions before (<) 2.06.08
cpe:2.3:o:netgear:gs108e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs108e » Version: V3
Netgear » Gs116e Firmware
Versions before (<) 2.6.0.35
cpe:2.3:o:netgear:gs116e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs116e » Version: V2
Netgear » Gss108e Firmware
Versions before (<) 1.6.0.4
cpe:2.3:o:netgear:gss108e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gss108e » Version: N/A
Netgear » Gss116e Firmware
Versions before (<) 1.6.0.9
cpe:2.3:o:netgear:gss116e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gss116e » Version: N/A
Netgear » Xs708e Firmware
Versions before (<) 1.6.0.23
cpe:2.3:o:netgear:xs708e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Xs708e » Version: V2
Netgear » Xs716e Firmware
Versions before (<) 1.6.0.23
cpe:2.3:o:netgear:xs716e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Xs716e » Version: N/A
Netgear » Gs110emx Firmware
Versions before (<) 1.0.1.4
cpe:2.3:o:netgear:gs110emx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs110emx » Version: N/A
Netgear » Gs810emx Firmware
Versions before (<) 1.7.1.1
cpe:2.3:o:netgear:gs810emx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs810emx » Version: N/A
Netgear » Xs512em Firmware
Versions before (<) 1.0.1.1
cpe:2.3:o:netgear:xs512em_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Xs512em » Version: N/A
Netgear » Xs724em Firmware
Versions before (<) 1.0.1.1
cpe:2.3:o:netgear:xs724em_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Xs724em » Version: N/A
Netgear » Fs728tlp Firmware
Versions before (<) 1.0.1.26
cpe:2.3:o:netgear:fs728tlp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Fs728tlp » Version: N/A
Netgear » Gs408epp Firmware
Versions before (<) 1.0.0.15
cpe:2.3:o:netgear:gs408epp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs408epp » Version: N/A
Netgear » Gs808e Firmware
Versions before (<) 1.7.0.7
cpe:2.3:o:netgear:gs808e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs808e » Version: N/A
Netgear » Gs908e Firmware
Versions before (<) 1.7.0.3
cpe:2.3:o:netgear:gs908e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gs908e » Version: N/A
Netgear » Gss108epp Firmware
Versions before (<) 1.0.0.15
cpe:2.3:o:netgear:gss108epp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Gss108epp » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-20658

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 29 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-20658

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:A/AC:L/Au:N/C:P/I:N/A:N	6.5	2.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.4	MEDIUM	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	2.8	2.5	MITRE
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2019-20658

https://kb.netgear.com/000061481/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Switches-PSV-2018-0612

Security Advisory for Sensitive Information Disclosure on Some Switches, PSV-2018-0612 | Answer | NETGEAR Support
Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-20658

Products affected by CVE-2019-20658

Exploit prediction scoring system (EPSS) score for CVE-2019-20658

CVSS scores for CVE-2019-20658

References for CVE-2019-20658