GF
Product
Gs116e Firmware
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 9Low 0
Watch
Add Gs116e Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-35231 | 8.8 | Mar 10 | The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and… Affected: 2.6.0.43 |
| CVE-2020-35229 | 8.8 | Mar 10 | The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is… Affected: 2.6.0.43 |
| CVE-2020-35223 | 8.8 | Mar 10 | The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in… Affected: 2.6.0.43 |
| CVE-2020-35221 | 8.8 | Mar 10 | The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a… Affected: 2.6.0.43 |
| CVE-2020-35782 | 8.1 | Dec 30 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 2.6.0.48 |
| CVE-2020-35801 | 7.3 | Dec 30 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 2.6.0.48 |
| CVE-2020-35227 | 7.2 | Mar 10 | A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attacker to inject IP… Affected: 2.6.0.43 |
| CVE-2020-35784 | 7.2 | Dec 30 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 2.6.0.48 |
| CVE-2020-35226 | 7.1 | Mar 10 | NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command Affected: 2.6.0.43 |
| CVE-2020-35230 | 6.8 | Mar 10 | Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices Affected: 2.6.0.43 |
| CVE-2020-35225 | 6.8 | Mar 10 | The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write requests, potentially… Affected: 2.6.0.43 |
| CVE-2020-35233 | 6.5 | Mar 10 | The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent… Affected: 2.6.0.43 |
| CVE-2020-35224 | 6.5 | Mar 10 | A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device… Affected: 2.6.0.43 |
| CVE-2020-35783 | 6.5 | Dec 30 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 2.6.0.48 |
| CVE-2017-18862 | 6.5 | Apr 28 | Certain NETGEAR devices are affected by authentication bypass Affected: before 2017-05-11 |
| CVE-2019-20658 | 6.5 | Apr 15 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 2.6.0.35 |
| CVE-2019-20676 | 6.0 | Apr 15 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 2.6.0.35 |
| CVE-2020-35228 | 4.8 | Mar 10 | A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or… Affected: 2.6.0.43 |
Showing 18