CVE-2020-26919

CRITICALCISA KEVNuclei

Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability

Title source: CISA
STIX 2.1 vulnerability

Record summary

CVE-2020-26919 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template. CISA lists CVE-2020-26919 in KEV.

Description

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

Description source: CVE List

Exploitation context

Known exploitation

CISA KEV
Listed · Nov 3, 2021 · CISA
VulnCheck KEV
Listed · Mar 15, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationActive
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 4, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

JGS516PE Devices

Browse NETGEAR / JGS516PE Devices
CISAVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALNETGEAR ProSAFE Plus - Unauthenticated Remote Code ExecutionCVSS 9.8

NETGEAR ProSAFE Plus before 2.6.0.43 is susceptible to unauthenticated remote code execution. Any HTML page is allowed as a valid endpoint to submit POST requests, allowing debug action via the submitId and debugCmd parameters. The problem is publicly exposed in the login.html webpage, which has to be publicly available to perform login requests but does not implement any restriction for executing debug actions. This will allow attackers to execute system commands.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected device.

Remediation

Apply the latest firmware update provided by NETGEAR to mitigate this vulnerability.

Authorsgy741
Template tagscvecve2020netgearrceoastrouterunauthkevvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:o:netgear:jgs516pe_firmware:*:*:*:*:*:*:*:*
https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/ https://unit42.paloaltonetworks.com/mirai-variant-iot-vulnerabilities/ https://nvd.nist.gov/vuln/detail/CVE-2020-26919 https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3