high8.8
CVE-2020-35223
The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF…
Impact
The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Gs116e Firmware | Version 2.6.0.43 |
| Netgear | Jgs516pe Firmware | Version 2.6.0.43 |