CVE-2020-35224

CVE-2020-35224 affects NETGEAR JGS516PE/GS116Ev2 switches (v2.6.0.43) with the NSDP protocol authentication method. The root cause is a buffer overflow in NSDP authentication, leading to remote unauthenticated attackers being able to force a device reboot. Sources from multiple databases (Red Hat...

CVE-2020-35224

A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot...

CVE-2020-35221

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers with access to a network capture to quickly generate multiple collisions to generate valid passwords, or infer some parts of the original...

CVE-2020-35221

CVE-2020-35221 affects NETGEAR JGS516PE/GS116Ev2 devices (version v2.6.0.43). The hashing algorithm used for NSDP password authentication is insecure, allowing an attacker with access to a network capture to generate multiple collisions and forge valid passwords or infer parts of the original. No...

CVE-2020-35783

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switc...

Design/Logic Flaw

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switc...

CVE-2020-35783

CVE-2020-35783 affects Netgear ProSafe/Smart+ switches JGS516PE, GS116Ev2, JGS524Ev2, and JGS524PE (pre-2.6.0.48). A lack of function-level access control and NSDP protocol behavior allow unauthenticated remote attackers to read all switch configuration parameters via read requests. Affected vers...

CVE-2020-35783

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switc...

Netgear Switch Discovery Protocol (NSDP) Detection

Detection of devices supporting the Netgear Switch Discovery Protocol NSDP. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Netgear GS105Ev2 Authentication Bypass / XSS / CSRF

Multiple Vulnerabilities - Netgear GS105Ev2 Product Vendor: Netgear Model: GS105Ev2 Firmware version: 1.3.0.3,1.4.0.2 Reference: http://downloadcenter.netgear.com/de/product/GS105Ev2searchResults Netgear GS105Ev2 is a Gigabit switch with 5 ports targeting SMBs. The switch can be configured by a w...

[Nsdtool] Toolset of scripts used to detect netgear switches in local networks

Nsdtool is a toolset of scripts used to detect netgear switches in local networks. The tool contains some extra features like bruteforce and setting a new password. Netgear has its own protocol called NSDP Netgear Switch Discovery Protocol, which is implemented to support security tests on the...