CVE-2020-35221 in JGS516PEinfo

Zusammenfassung

von MITRE • 11.03.2021

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a network capture) to quickly generate multiple collisions to generate valid passwords, or infer some parts of the original.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservieren

13.12.2020

Veröffentlichung

11.03.2021

Moderieren

akzeptiert

Eintrag

VDB-171056

CPE

bereit

EPSS

0.00470

KEV

nein

Aktivitäten

very low

Quellen

Want to know what is going to be exploited?

We predict KEV entries!