Netgear Gs116e_firmware
18 CVEs affecting Netgear Gs116e_firmware. Latest disclosed: 2021-03-10. Critical: 0, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35231 | High | 8.8 | 2021-03-10 | The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass acces… |
CVE-2020-35229 | High | 8.8 | 2021-03-10 | The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused u… |
CVE-2020-35223 | High | 8.8 | 2021-03-10 | The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF… |
CVE-2020-35221 | High | 8.8 | 2021-03-10 | The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers… |
CVE-2020-35801 | High | 8.3 | 2020-12-30 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524P… |
CVE-2020-35782 | High | 8.1 | 2020-12-30 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524P… |
CVE-2020-35227 | High | 7.2 | 2021-03-10 | A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attack… |
CVE-2020-35226 | High | 7.1 | 2021-03-10 | NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request comm… |
CVE-2020-35230 | Medium | 6.8 | 2021-03-10 | Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters… |
CVE-2020-35225 | Medium | 6.8 | 2021-03-10 | The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write reque… |
CVE-2020-35233 | Medium | 6.5 | 2021-03-10 | The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by s… |
CVE-2020-35224 | Medium | 6.5 | 2021-03-10 | A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attacke… |
CVE-2020-35783 | Medium | 6.5 | 2020-12-30 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev… |
CVE-2017-18862 | Medium | 6.5 | 2020-04-28 | Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11… |
CVE-2019-20658 | Medium | 6.5 | 2020-04-15 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before 1.6… |
CVE-2020-35784 | Medium | 6.2 | 2020-12-30 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev… |
CVE-2019-20676 | Medium | 6.0 | 2020-04-15 | Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE b… |
CVE-2020-35228 | Medium | 4.8 | 2021-03-10 | A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arb… |