High severity · published Dec 30, 2020
CVE-2020-35801
Certain NETGEAR devices are affected by incorrect configuration of security settings
7.3
CVSS
1.7%
EPSS
No
On KEV
Description
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to update the switch firmware.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GF
Gs116e Firmware · Netgear
before 2.6.0.48 · source: NVD
JF
Jgs516pe Firmware · Netgear
before 2.6.0.48 · source: NVD
JF
Jgs524e Firmware · Netgear
before 2.6.0.48 · source: NVD
JF
Jgs524pe Firmware · Netgear
before 2.6.0.48 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-35801
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-35801
Vendor Advisory
https://kb.netgear.com/000062635/Security-Advisory-for-Security-Misconfiguration-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0376
Not Applicable
https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
More from Gs116e Firmware
8.8
CVE-2020-35231
The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and…
8.8
CVE-2020-35229
The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is…
8.8
CVE-2020-35223
The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in…
8.8
CVE-2020-35221
The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a…
8.1
CVE-2020-35782
Certain NETGEAR devices are affected by lack of access control at the function level