jgs516pe_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/jgs516pe_firmware/ Sun, 26 Feb 2023 06:41:14 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png jgs516pe_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/jgs516pe_firmware/ 32 32 CVE-2020-35226 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35226/ Sun, 26 Feb 2023 06:41:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35226/ NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command.

The post CVE-2020-35226 appeared first on CVE Vulnerability.

]]> NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command.

The post CVE-2020-35226 appeared first on CVE Vulnerability.

]]> CVE-2020-35227 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35227/ Sun, 26 Feb 2023 06:41:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35227/ A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attacker to inject IP addresses into the whitelist via the checkedList parameter to the delete command.

The post CVE-2020-35227 appeared first on CVE Vulnerability.

]]> A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attacker to inject IP addresses into the whitelist via the checkedList parameter to the delete command.

The post CVE-2020-35227 appeared first on CVE Vulnerability.

]]> CVE-2020-35228 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35228/ Sun, 26 Feb 2023 06:41:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35228/ A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or HTML via the language parameter.

The post CVE-2020-35228 appeared first on CVE Vulnerability.

]]> A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or HTML via the language parameter.

The post CVE-2020-35228 appeared first on CVE Vulnerability.

]]> CVE-2020-35229 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35229/ Sun, 26 Feb 2023 06:41:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35229/ The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which allows attackers (with access to network traffic) to effectively gain administrative privileges.

The post CVE-2020-35229 appeared first on CVE Vulnerability.

]]> The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which allows attackers (with access to network traffic) to effectively gain administrative privileges.

The post CVE-2020-35229 appeared first on CVE Vulnerability.

]]> CVE-2020-35230 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35230/ Sun, 26 Feb 2023 06:41:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35230/ Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters sent through the web server can be abused to cause a denial of service attack.

The post CVE-2020-35230 appeared first on CVE Vulnerability.

]]> Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters sent through the web server can be abused to cause a denial of service attack.

The post CVE-2020-35230 appeared first on CVE Vulnerability.

]]> CVE-2020-35231 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35231/ Sun, 26 Feb 2023 06:41:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35231/ The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device.

The post CVE-2020-35231 appeared first on CVE Vulnerability.

]]> The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device.

The post CVE-2020-35231 appeared first on CVE Vulnerability.

]]> CVE-2020-35233 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35233/ Sun, 26 Feb 2023 06:41:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35233/ The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent connections, aka a denial of service attack.

The post CVE-2020-35233 appeared first on CVE Vulnerability.

]]> The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent connections, aka a denial of service attack.

The post CVE-2020-35233 appeared first on CVE Vulnerability.

]]> CVE-2020-35221 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35221/ Sun, 26 Feb 2023 06:41:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35221/ The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a network capture) to quickly generate multiple collisions to generate valid passwords, or infer some parts of the original.

The post CVE-2020-35221 appeared first on CVE Vulnerability.

]]> The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a network capture) to quickly generate multiple collisions to generate valid passwords, or infer some parts of the original.

The post CVE-2020-35221 appeared first on CVE Vulnerability.

]]> CVE-2020-35223 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35223/ Sun, 26 Feb 2023 06:41:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35223/ The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in HTTP requests.

The post CVE-2020-35223 appeared first on CVE Vulnerability.

]]> The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in HTTP requests.

The post CVE-2020-35223 appeared first on CVE Vulnerability.

]]> CVE-2020-35224 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-35224/ Sun, 26 Feb 2023 06:41:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-35224/ A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot.

The post CVE-2020-35224 appeared first on CVE Vulnerability.

]]> A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot.

The post CVE-2020-35224 appeared first on CVE Vulnerability.

]]>