PT-2020-5878 · NetGear · Netgear Jgs516Pe

Published 2020-09-17 · Updated 2025-12-17 · CVE-2020-26919

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE versions prior to 2.6.0.43

Description: The issue is related to the lack of access control at the function level in NETGEAR JGS516PE devices. This can be exploited by a remote attacker to cause a denial of service. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations: For versions prior to 2.6.0.43, update to version 2.6.0.43 or later to resolve the issue. At the moment, there is no other information about additional mitigation measures.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2021-01967

CVE-2020-26919

Affected Products

Netgear Jgs516Pe

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2020-26919 · Security Note
• https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26919 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01967 · Security Note
• https://twitter.com/lovithreatintel/status/2001191208392253894 · Twitter Post
• https://t.me/cybersecuritytechnologies/2861 · Telegram Post
• https://t.me/cvenotify/110234 · Telegram Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/cveNotify/142167 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-26919 · Note
• https://cxsecurity.com/cveshow/CVE-2020-26919 · Note