CVE-2020-35801

Certain NETGEAR devices are affected by incorrect configuration of security settings

High · published December 29, 2020

CVSS v3.1
8.3
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to update the switch firmware.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:L/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01706 · 77.1th percentile
Published
2020-12-29T23:38Z
EPSS history
Timeline
  • 29 DEC 23:38Z
    Certain NETGEAR devices are affected by incorrect configuration of security settings
    cvelistv5