CVE-2020-35229
The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which allows attackers (with access to network traffic) to effectively gain administrative privileges.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2021-03-10
- Last modified
- 2024-08-04
- Weaknesses
- CWE-384
Affected products
References
- https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-g…
