Unauthenticated Remote Access Control Vulnerability in NETGEAR Devices

Unauthenticated Remote Access Control Vulnerability in NETGEAR Devices

CVE-2020-35783 · MEDIUM Severity

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switch configuration parameters by sending the corresponding read requests.

Learn more about our Web Application Penetration Testing UK.