Netgear JGS516PE Firmware 2.6.0.43
Approved changes feed: RSS · Atom
cpe:2.3:o:netgear:jgs516pe_firmware:2.6.0.43:*:*:*:*:*:*:*
part: o version: 2.6.0.43 update: *
| Vendor | Netgear (99700297-c207-56f4-abd0-97ab0c8bf3ab) |
|---|---|
| Product | Jgs516Pe Firmware (44d10289-7753-53f0-92aa-f80e1b73fe89) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-35233 |
vulnerable | 2026-06-08 05:25:00.978149 |
Details available
The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent connections, aka a denial of service attack.
Published: 2021-03-10T18:16:43.000Z
Updated: 2024-08-04T17:02:07.453Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35231 |
vulnerable | 2026-06-08 05:25:00.977484 |
Details available
The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device.
Published: 2021-03-10T18:14:44.000Z
Updated: 2024-08-04T17:02:07.020Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35230 |
vulnerable | 2026-06-08 05:25:00.976962 |
Details available
Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters sent through the web server can be abused to cause a denial of service attack.
Published: 2021-03-10T18:11:54.000Z
Updated: 2024-08-04T17:02:06.944Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35229 |
vulnerable | 2026-06-08 05:25:00.976515 |
Details available
The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which allows attackers (with access to network traffic) to effectively gain administrative privileges.
Published: 2021-03-10T18:10:56.000Z
Updated: 2024-08-04T17:02:07.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35228 |
vulnerable | 2026-06-08 05:25:00.975947 |
Details available
A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote attackers to inject arbitrary web script or HTML via the language parameter.
Published: 2021-03-10T18:10:13.000Z
Updated: 2024-08-04T17:02:07.442Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35227 |
vulnerable | 2026-06-08 05:25:00.975441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35226 |
vulnerable | 2026-06-08 05:25:00.974877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35225 |
vulnerable | 2026-06-08 05:25:00.974190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35224 |
vulnerable | 2026-06-08 05:25:00.973811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35223 |
vulnerable | 2026-06-08 05:25:00.973340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35221 |
vulnerable | 2026-06-08 05:25:00.971813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.