CVE-2020-35225

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write requests, potentially allowing denial of service attacks...

CVE-2020-35225

The CVE-2020-35225 affects NETGEAR JGS516PE/GS116Ev2 devices running v2.6.0.43, where the NSDP protocol fails to validate the length of string parameters in write requests, potentially enabling a denial-of-service condition. The exploitation details are not provided in the supplied documents; no ...

CVE-2020-35224

CVE-2020-35224 affects NETGEAR JGS516PE/GS116Ev2 switches (v2.6.0.43) with the NSDP protocol authentication method. The root cause is a buffer overflow in NSDP authentication, leading to remote unauthenticated attackers being able to force a device reboot. Sources from multiple databases (Red Hat...

CVE-2020-35224

A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot...

CVE-2020-35221

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers with access to a network capture to quickly generate multiple collisions to generate valid passwords, or infer some parts of the original...

CVE-2020-35221

CVE-2020-35221 affects NETGEAR JGS516PE/GS116Ev2 devices (version v2.6.0.43). The hashing algorithm used for NSDP password authentication is insecure, allowing an attacker with access to a network capture to generate multiple collisions and forge valid passwords or infer parts of the original. No...

CVE-2020-35224: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot...

CVE-2020-35229: Session Fixation

The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which allows attackers with access to network traffic to effectively gain administrative privileges...

CVE-2020-35225: Buffer Copy without Checking Size of Input

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write requests, potentially allowing denial of service attacks...

CVE-2020-35221: Inadequate Encryption Strength

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers with access to a network capture to quickly generate multiple collisions to generate valid passwords, or infer some parts of the original...

CVE-2020-35231: Improper Authentication

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device...

PT-2021-2395

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: The issue is related to the authentication token required for NSDP write requests on the affected devices. This token is not properly invalidated and can be reused until a new token is...

PT-2021-2875

Name of the Vulnerable Software and Affected Versions NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description The hashing algorithm used for NSDP password authentication is insecure, allowing attackers with network capture access to generate collisions and infer parts of the original password, or...

PT-2021-11734

Multiple Vulnerabilities in Netgear ProSAFE Plus JGS516PE/GS116Ev2 Switches PoCs https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches // - Unauthenticated RCE CVE-2020-26919 - NSDP Authentication Bypass...

PT-2021-2436

Name of the Vulnerable Software and Affected Versions: Netgear ProSafe Plus JGS516PE version 2.6.0.43 Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43 Description: The issue is related to errors in the authentication procedure of the NSDP protocol implementation. This allows a remote attacker to...

PT-2021-11737

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: The issue concerns the NSDP protocol implementation, which does not properly validate the length of string parameters sent in write requests. This could potentially allow denial of servi...

PT-2021-11736

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43 Description: A buffer overflow issue exists in the NSDP protocol authentication method, allowing remote unauthenticated attackers to force a device reboot. Recommendations: For NETGEAR...

CVE-2020-35783

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switc...

Design/Logic Flaw

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switc...

CVE-2020-35783

CVE-2020-35783 affects Netgear ProSafe/Smart+ switches JGS516PE, GS116Ev2, JGS524Ev2, and JGS524PE (pre-2.6.0.48). A lack of function-level access control and NSDP protocol behavior allow unauthenticated remote attackers to read all switch configuration parameters via read requests. Affected vers...