Jgs516Pe Firmware
CVE-2020-35782
HIGH
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. The TFTP firmware update mechanism does not properly implement firmware validations, allowing remote attackers to write arbitrary data to internal memory.
AnalysisAI
Certain NETGEAR devices are affected by lack of access control at the function level. Rated high severity (CVSS 8.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. The TFTP firmware update mechanism does not properly implement firmware validations, allowing remote attackers to write arbitrary data to internal memory. Affected products include: Netgear Jgs516Pe Firmware, Netgear Jgs524E Firmware, Netgear Jgs524Pe Firmware, Netgear Gs116E Firmware. Version information: before 2.6.0.48.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Jgs516Pe Firmware
View allNETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. Rated critical se
Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.3), th
Certain NETGEAR devices are affected by lack of access control at the function level. Rated high severity (CVSS 7.2), th
Certain NETGEAR devices are affected by lack of access control at the function level. Rated medium severity (CVSS 6.5),
NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS. Rated medium severity (CVSS 6.1), this vulnerabi
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today