CVE-2020-35801

published 2020-12-30

CVE-2020-35801: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48…

high 7.3 CVSS 3.1

AV A AC L PR L UI N S U C N I H A H

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to update the switch firmware.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
netgear	gs116e_firmware	< 2.6.0.48	2.6.0.48
netgear	jgs516pe_firmware	< 2.6.0.48	2.6.0.48
netgear	jgs524e_firmware	< 2.6.0.48	2.6.0.48
netgear	jgs524pe_firmware	< 2.6.0.48	2.6.0.48