CVE-2020-35232 in JGS516PE

Сводка

по MITRE • 11.03.2021

The TFTP firmware update mechanism on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices does not properly implement firmware validations, allowing remote attackers to write arbitrary data to internal memory.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Резервировать: 13.12.2020
• Раскрытие: 11.03.2021
• Модерация: принято
• Вход: VDB-171067
• CPE: готов
• CWE: Неизвестно
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Lawfirm, Finance, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-35232
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-35232
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-35232/