9.8

CVE-2019-20699

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects GS105Ev2 before 1.6.0.4, GS105PE before 1.6.0.4, GS408EPP before 1.0.0.15, GS808E before 1.7.0.7, GS908E before 1.7.0.3, GSS108E before 1.6.0.4, and GSS108EPP before 1.0.0.15.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Gs105e Firmware Version < 1.6.0.4
   Netgear ≫ Gs105e Version v2
Netgear ≫ Gs105pe Firmware Version < 1.6.0.4
   Netgear ≫ Gs105pe Version -
Netgear ≫ Gs408epp Firmware Version < 1.0.0.15
   Netgear ≫ Gs408epp Version -
Netgear ≫ Gs808e Firmware Version < 1.7.0.7
   Netgear ≫ Gs808e Version -
Netgear ≫ Gs908e Firmware Version < 1.7.0.3
   Netgear ≫ Gs908e Version -
Netgear ≫ Gss108e Firmware Version < 1.6.0.4
   Netgear ≫ Gss108e Version -
Netgear ≫ Gss108epp Firmware Version < 1.0.0.15
   Netgear ≫ Gss108epp Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.14% 0.624
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
MITRE 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://kb.netgear.com/000061230/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Switches-PSV-2018-0538
Vendor Advisory