CVE-2020-35801: High severity netgear jgs516pe firmware vulnerability
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to update the switch firmware.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-35801?
CVE-2020-35801 is classified as a high severity vulnerability due to its potential to allow unauthorized remote access.
How do I fix CVE-2020-35801?
To fix CVE-2020-35801, update the firmware of the affected NETGEAR devices to version 2.6.0.48 or later.
Which NETGEAR devices are affected by CVE-2020-35801?
CVE-2020-35801 affects NETGEAR JGS516PE, JGS524Ev2, JGS524PE, and GS116Ev2 devices running firmware versions prior to 2.6.0.48.
What is the nature of the vulnerability in CVE-2020-35801?
CVE-2020-35801 involves incorrect configuration of security settings, allowing a TFTP server to be active by default.
Can CVE-2020-35801 be exploited remotely?
Yes, CVE-2020-35801 allows remote authenticated users to exploit the vulnerability if the affected configurations are present.