PT-2020-5876 · NetGear · Netgear Gs810Emx+3

Allmight16 · Published 2020-09-17 · Updated 2021-07-21 · CVE-2020-26921

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NETGEAR GS110EMX versions prior to 1.0.1.7 NETGEAR GS810EMX versions prior to 1.7.1.3 NETGEAR XS512EM versions prior to 1.0.1.3 NETGEAR XS724EM versions prior to 1.0.1.3

Description: The issue is related to authentication bypass in certain NETGEAR devices. This can be exploited by a remote attacker to cause a denial of service.

Recommendations: For NETGEAR GS110EMX versions prior to 1.0.1.7, update to version 1.0.1.7 or later. For NETGEAR GS810EMX versions prior to 1.7.1.3, update to version 1.7.1.3 or later. For NETGEAR XS512EM versions prior to 1.0.1.3, update to version 1.0.1.3 or later. For NETGEAR XS724EM versions prior to 1.0.1.3, update to version 1.0.1.3 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2021-01965

CVE-2020-26921

Affected Products

Netgear Gs110Emx

Netgear Gs810Emx

Netgear Xs512Em

Netgear Xs724Em

References · 6

• https://kb.netgear.com/000062332/Security-Advisory-for-Authentication-Bypass-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0305 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26921 · Security Note
• https://bdu.fstec.ru/vul/2021-01965 · Security Note
• https://cxsecurity.com/cveshow/CVE-2020-26921 · Note
• https://t.me/cibsecurity/15173 · Telegram Post