CVE-2020-35226

HIGH

NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 - Unauthenticated DHCP Configuration Modification

Title source: llm
STIX 2.1

Description

NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command.

References (1)

Core 1

Scores

CVSS v3 7.1
EPSS 0.0049
EPSS Percentile 65.6%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Details

CWE
CWE-306
Status published
Products (2)
netgear/gs116e_firmware 2.6.0.43
netgear/jgs516pe_firmware 2.6.0.43
Published Mar 10, 2021
Tracked Since Feb 18, 2026