CVE-2020-35782

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. The TFTP firmware update mechanism does not properly implement firmware validations,...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-35782. Reason: This candidate is a reservation duplicate of CVE-2020-35782. Notes: All CVE users should reference CVE-2020-35782 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2020-35232

This CVE-2020-35232 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-35782

The CVE-2020-35782 entry affects NETGEAR Smart Managed Plus switches: JGS516PE, JGS524Ev2, JGS524PE, and GS116Ev2, all prior to firmware version 2.6.0.48. The underlying issue is lack of function-level access control, combined with a TFTP firmware update mechanism that does not properly validate ...