CVE-2020-35221

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers…

published March 10, 2021

CVSS
—
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a network capture) to quickly generate multiple collisions to generate valid passwords, or infer some parts of the original.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00470 · 39.6th percentile
Published
2021-03-10T17:48Z
EPSS history
Timeline
  • 10 MAR 17:48Z
    The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers…
    cvelistv5