Gs116e Firmware (Netgear) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2021-03-10. Vendor: Netgear.
CVEs of Gs116e Firmware
- CVE-2020-35227 - CVSS 7.2 (high), 2021-03-10: A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an…
- CVE-2020-35230 - CVSS 6.8 (medium), 2021-03-10: Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters…
- CVE-2020-35226 - CVSS 7.1 (high), 2021-03-10: NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request…
- CVE-2020-35229 - CVSS 8.8 (high), 2021-03-10: The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused…
- CVE-2020-35233 - CVSS 6.5 (medium), 2021-03-10: The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by…
- CVE-2020-35228 - CVSS 4.8 (medium), 2021-03-10: A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject…
- CVE-2020-35231 - CVSS 8.8 (high), 2021-03-10: The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass…
- CVE-2020-35224 - CVSS 6.5 (medium), 2021-03-10: A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated…
- CVE-2020-35223 - CVSS 8.8 (high), 2021-03-10: The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the…
- CVE-2020-35225 - CVSS 6.8 (medium), 2021-03-10: The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write…
- CVE-2020-35221 - CVSS 8.8 (high), 2021-03-10: The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers…
- CVE-2020-35801 - CVSS 8.3 (high), 2020-12-30: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48,…
- CVE-2020-35782 - CVSS 8.1 (high), 2020-12-30: Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48,…
- CVE-2020-35784 - CVSS 7.2 (high), 2020-12-30: Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48,…
- CVE-2020-35783 - CVSS 6.5 (medium), 2020-12-30: Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48,…
- CVE-2017-18862 - CVSS 6.5 (medium), 2020-04-28: Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before…
- CVE-2019-20676 - CVSS 6 (medium), 2020-04-15: Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE…
- CVE-2019-20658 - CVSS 6.5 (medium), 2020-04-15: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects FS728TLP before 1.0.1.26, GS105Ev2 before 1.6.0.4, GS105PE before…
