high8.8
CVE-2020-35229
The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused u…
Impact
The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which allows attackers (with access to network traffic) to effectively gain administrative privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Gs116e Firmware | Version 2.6.0.43 |
| Netgear | Jgs516pe Firmware | Version 2.6.0.43 |