8.8

CVE-2020-26921

Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7.1.3, XS512EM before 1.0.1.3, and XS724EM before 1.0.1.3.

Data is provided by the National Vulnerability Database (NVD)
Netgear ≫ Gs110emx Firmware Version < 1.0.1.7
   Netgear ≫ Gs110emx Version-
Netgear ≫ Gs810emx Firmware Version < 1.7.1.3
   Netgear ≫ Gs810emx Version-
Netgear ≫ Xs512em Firmware Version < 1.0.1.3
   Netgear ≫ Xs512em Version-
Netgear ≫ Xs724em Firmware Version < 1.0.1.3
   Netgear ≫ Xs724em Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.13% 0.296
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
cve@mitre.org 8.3 2.8 5.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.