CVE-2020-26921

CVSS 8.3 HIGHEPSS 0.8%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

09 Oct 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7.1.3, XS512EM before 1.0.1.3, and XS724EM before 1.0.1.3.

CVSS:3.1/AC:L/AV:A/A:H/C:L/I:H/PR:N/S:U/UI:N

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://kb.netgear.com/000062332/Security-Advisory-for-Authentication-Bypass-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0305