RULE(RULE ID:332781)

Rule General Information
Release Date: 2021-03-11
Rule Name: Netgear ProSAFE Plus Unauthenticated Remote Code Execution Vulnerability (CVE-2020-26919)
Severity:
CVE ID:
Rule Protection Details
Description: NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Network Device
Reference: https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377