Design/Logic Flaw

2021-03-1018:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write requests, potentially allowing denial of service attacks.

CPENameOperatorVersion
gs116e_firmwareeq2.6.0.43
jgs516pe_firmwareeq2.6.0.43

CPE	Name	Operator	Version
	gs116e_firmware	eq	2.6.0.43
	jgs516pe_firmware	eq	2.6.0.43

References

research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/