PT-2021-2394 · NetGear · Netgear Jgs516Pe+1

Published 2021-03-08 · Updated 2021-07-21 · CVE-2020-35226

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions: NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43

Description: The issue is related to the configuration of the DHCP server in the firmware of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 devices. It is associated with insufficient sanitization of special elements in output used by an incoming component. An attacker can exploit this issue by sending specially crafted DHCP requests, potentially leading to a denial of service. The estimated number of potentially affected devices worldwide is not specified.

Recommendations: For NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43, consider restricting access to the DHCP configuration to prevent unauthorized modifications until a patch is available. As a temporary workaround, avoid using the device's DHCP server functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Missing Authentication

Weakness Enumeration

CWE-74

CWE-306

Related Identifiers

BDU:2021-01636

CVE-2020-35226

Affected Products

Netgear Gs116Ev2

Netgear Jgs516Pe

References · 8

• https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-35226 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35226 · Security Note
• https://bdu.fstec.ru/vul/2021-01636 · Security Note
• https://t.me/cybersecuritytechnologies/2861 · Telegram Post
• https://cxsecurity.com/cveshow/CVE-2020-35226 · Note
• https://t.me/cvenotify/11126 · Telegram Post
• https://t.me/cibsecurity/24733 · Telegram Post