High severity · published Dec 30, 2020
CVE-2020-35782
Certain NETGEAR devices are affected by lack of access control at the function level
8.1
CVSS
1.7%
EPSS
No
On KEV
Description
Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. The TFTP firmware update mechanism does not properly implement firmware validations, allowing remote attackers to write arbitrary data to internal memory.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GF
Gs116e Firmware · Netgear
before 2.6.0.48 · source: NVD
JF
Jgs516pe Firmware · Netgear
before 2.6.0.48 · source: NVD
JF
Jgs524e Firmware · Netgear
before 2.6.0.48 · source: NVD
JF
Jgs524pe Firmware · Netgear
before 2.6.0.48 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-35782
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-35782
Vendor Advisory
https://kb.netgear.com/000062636/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0378
Exploit
https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
More from Gs116e Firmware
8.8
CVE-2020-35231
The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and…
8.8
CVE-2020-35229
The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is…
8.8
CVE-2020-35223
The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in…
8.8
CVE-2020-35221
The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a…
7.3
CVE-2020-35801
Certain NETGEAR devices are affected by incorrect configuration of security settings