CVE-2020-35232 in JGS516PE

Riassunto

di MITRE • 11/03/2021

The TFTP firmware update mechanism on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices does not properly implement firmware validations, allowing remote attackers to write arbitrary data to internal memory.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 13/12/2020
• Divulgazione: 11/03/2021
• Moderazione: accettato
• Voce: VDB-171067
• CPE: pronto
• CWE: Sconosciuto
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Homeoffice, Chemical, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-35232
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-35232
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-35232/