CVE-2020-35230: Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters…

PriorityP426medium6.8CVSS 3.1

AVAACLPRHUINSUCHIHAH

EPSS

0.42%

33.9th percentile

Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters sent through the web server can be abused to cause a denial of service attack.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
netgear	gs116e_firmware	—	—
netgear	jgs516pe_firmware	—	—

CVSS provenance

nvdv3.16.8MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.06.7MEDIUMAV:A/AC:L/Au:S/C:P/I:P/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET EXPLOIT Netgear ProSAFE Plus Possible Integer Overflow Attempt Inbound M2 (CVE-2020-35230)

suricata·2021-03-11·CVSS 6.8

CVE-2020-35230 [MEDIUM] ET EXPLOIT Netgear ProSAFE Plus Possible Integer Overflow Attempt Inbound M2 (CVE-2020-35230) ET EXPLOIT Netgear ProSAFE Plus Possible Integer Overflow Attempt Inbound M2 (CVE-2020-35230) Rule: alert http any any -> $HOME_NET any (msg:"ET EXPLOIT Netgear ProSAFE Plus Possible Integer Overflow Attempt Inbound M2 (CVE-2020-35230)"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/portbased_basic.htm"; http.request_body; content:"submitId="; content:"&bPortBasedVLAN="; fast_pattern; content:"&memBMap=-"; reference:url,research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/; reference:cve,2020-35230; classtype:attempted-admin; sid:2031942; rev:1; metadata:attack_target Networking_Equipment, created_at 2021_03_11, cve CVE_2020_35230, deployment Perimeter, deployment Internal, confidence

Suricata

ET EXPLOIT Netgear ProSAFE Plus Possible Integer Overflow Attempt Inbound M1 (CVE-2020-35230)

suricata·2021-03-11·CVSS 6.8

CVE-2020-35230 [MEDIUM] ET EXPLOIT Netgear ProSAFE Plus Possible Integer Overflow Attempt Inbound M1 (CVE-2020-35230) ET EXPLOIT Netgear ProSAFE Plus Possible Integer Overflow Attempt Inbound M1 (CVE-2020-35230) Rule: alert http any any -> $HOME_NET any (msg:"ET EXPLOIT Netgear ProSAFE Plus Possible Integer Overflow Attempt Inbound M1 (CVE-2020-35230)"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/portbased_basic.htm"; http.request_body; content:"submitId="; content:"&bPortBasedVLAN="; fast_pattern; content:"&groupId=-"; reference:url,research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/; reference:cve,2020-35230; classtype:attempted-admin; sid:2031941; rev:1; metadata:attack_target Networking_Equipment, created_at 2021_03_11, cve CVE_2020_35230, deployment Perimeter, deployment Internal, confidence