CVE-2020-35233

The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent connections, aka a denial of service attack.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-03-10

Last modified

2024-08-04

Weaknesses

CWE-400

Affected products

• Gs116e Firmware (Netgear)
• Jgs516pe Firmware (Netgear)

References

• https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-g…