The vulnerability of the Netgear Switch Discovery Protocol (NSDP) implementation in the microprogrammable switching devices NETGEAR ProSAFE Plus JGS516PE and ProSAFE Plus GS116Ev2 allows a perpetrator to increase their privileges.

🗓️ 12 May 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

NSDP on NETGEAR ProSAFE Plus JGS516PE and GS116Ev2 enables remote privilege escalation due to a hashing algorithm vulnerability.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-35221	9 Oct 202419:00	–	circl
CNNVD	Netgear NETGEAR JGS516PE 加密问题漏洞	10 Mar 202100:00	–	cnnvd
CNVD	NETGEAR JGS516PE/GS116Ev2 Password Hash Mechanism Insecurity Vulnerability	11 Mar 202100:00	–	cnvd
CVE	CVE-2020-35221	10 Mar 202117:48	–	cve
Cvelist	CVE-2020-35221	10 Mar 202117:48	–	cvelist
EUVD	EUVD-2020-22900	7 Oct 202500:30	–	euvd
NVD	CVE-2020-35221	10 Mar 202118:15	–	nvd
Prion	Design/Logic Flaw	10 Mar 202118:15	–	prion
RedhatCVE	CVE-2020-35221	22 May 202517:10	–	redhatcve

Vulners

Node

netgear prosafe_plus_jgs516peMatch2.6.0.43

OR

netgear prosafe_plus_gs116ev2Match2.6.0.43

Source	Link
securitylab	www.securitylab.ru/vulnerability/517366.php
research	www.research.nccgroup.com/tag/cve-2020-35221/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021031108
tenable	www.tenable.com/cve/CVE-2020-35221
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-35221
research	www.research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
web	www.web.nvd.nist.gov/view/vuln/detail

12 May 2021 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 26.8

CVSS 37.5

EPSS0.00044

netgear switch discovery privilege escalation hashing algorithm jgs516pe gs116ev2