CVE-2020-35228: XSS
A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or HTML via the language parameter.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35228?
CVE-2020-35228 is a cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices.
How does CVE-2020-35228 affect NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices?
CVE-2020-35228 allows remote attackers to inject arbitrary web script or HTML via the language parameter in the administration web panel.
What is the severity of CVE-2020-35228?
CVE-2020-35228 has a severity score of 4.8, which is considered medium.
How can I fix CVE-2020-35228?
To fix CVE-2020-35228, users should update their NETGEAR JGS516PE/GS116Ev2 devices to the latest firmware version.
Where can I find more information about CVE-2020-35228?
You can find more information about CVE-2020-35228 at the following link: [https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/](https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/)