Netgear NETGEAR JGS516PE has a cross-site scripting vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A cross-site scripting vulnerability exists in the management web panel of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...

CVE-2020-35228: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2020-35226: Missing Authentication for Critical Function

NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command...

Netgear NETGEAR JGS516PE: Encryption-related vulnerabilities

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A security vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. It allows an external attacker to gain administrative access to the switch...

Netgear NETGEAR JGS516PE has a cross-site request forgeing vulnerability

The Netgear NETGEAR JGS516PE is a switch from Netgear, Inc. The NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 suffers from a cross-site request forgery vulnerability that stems from a CSRF protection mechanism implemented in the web management panel that can be bypassed by omitting the CSRF token parameter...

PT-2021-2392

Name of the Vulnerable Software and Affected Versions: Netgear ProSafe Plus JGS516PE version 2.6.0.43 Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43 Description: The issue is related to the implementation of the firmware update mechanism in Netgear devices, which lacks proper input validation. Th...

PT-2021-11737

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: The issue concerns the NSDP protocol implementation, which does not properly validate the length of string parameters sent in write requests. This could potentially allow denial of servi...

PT-2021-2394

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: The issue is related to the configuration of the DHCP server in the firmware of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 devices. It is associated with insufficient...

PT-2021-2434

Name of the Vulnerable Software and Affected Versions: Netgear ProSafe Plus JGS516PE version 2.6.0.43 Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43 Description: The issue is related to insufficient input validation in the web administration panel of the affected devices, which can lead to intege...

PT-2021-11735

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: The issue concerns the CSRF protection mechanism in the web administration panel, which can be bypassed by omitting the CSRF token parameter in HTTP requests. Recommendations: For NETGEA...

PT-2021-11734

Multiple Vulnerabilities in Netgear ProSAFE Plus JGS516PE/GS116Ev2 Switches PoCs https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches // - Unauthenticated RCE CVE-2020-26919 - NSDP Authentication Bypass...

PT-2021-2395

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: The issue is related to the authentication token required for NSDP write requests on the affected devices. This token is not properly invalidated and can be reused until a new token is...

PT-2021-11736

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: A buffer overflow issue exists in the NSDP protocol authentication method, allowing remote unauthenticated attackers to force a device reboot. Recommendations: For NETGEAR...

PT-2021-2875

Name of the Vulnerable Software and Affected Versions NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description The hashing algorithm used for NSDP password authentication is insecure, allowing attackers with network capture access to generate collisions and infer parts of the original password, or...

PT-2021-2404

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: A buffer overflow vulnerability in the access control section of the administration web panel allows an attacker to inject IP addresses into the whitelist via the checkedList parameter t...

PT-2021-2393

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: The TFTP server fails to handle multiple connections, allowing external attackers to force device reboots by sending concurrent connections, resulting in a denial of service attack. This...

PT-2021-2433

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: A cross-site scripting XSS vulnerability in the administration web panel allows remote attackers to inject arbitrary web script or HTML via the language parameter, also referred to as...

PT-2021-2436

Name of the Vulnerable Software and Affected Versions: Netgear ProSafe Plus JGS516PE version 2.6.0.43 Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43 Description: The issue is related to errors in the authentication procedure of the NSDP protocol implementation. This allows a remote attacker to...

CVE-2021-27257

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files v...

CVE-2021-27256

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...