CVE-2020-35227

A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attacker to inject IP addresses into the whitelist via the checkedList parameter to the delete command.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2021-03-10

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Gs116e Firmware (Netgear)
• Jgs516pe Firmware (Netgear)

References

• https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-g…