CVE-2020-35224: Buffer Overflow
A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this NETGEAR JGS516PE/GS116Ev2 vulnerability?
The vulnerability ID is CVE-2020-35224.
What is the severity level of CVE-2020-35224?
CVE-2020-35224 has a severity level of 6.5 (medium).
How can remote attackers exploit CVE-2020-35224?
Remote unauthenticated attackers can exploit CVE-2020-35224 by forcing a device reboot through a buffer overflow vulnerability in the NSDP protocol authentication method.
Which NETGEAR devices are affected by CVE-2020-35224?
NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices are affected by CVE-2020-35224.
Is the NETGEAR GS116E or JGS516PE vulnerable to CVE-2020-35224?
No, the NETGEAR GS116E and JGS516PE are not vulnerable to CVE-2020-35224.
How can I fix the CVE-2020-35224 vulnerability?
To fix the CVE-2020-35224 vulnerability, it is recommended to update the firmware of the affected NETGEAR JGS516PE/GS116Ev2 devices to a version that addresses the issue.
Where can I find more information about CVE-2020-35224?
You can find more information about CVE-2020-35224 at the following reference: [Link](https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/)
What are the common weaknesses associated with CVE-2020-35224?
CVE-2020-35224 is associated with the common weaknesses CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Buffer Copy without Checking Size of Input).