PT-2021-2436
CVE-2020-35231
·
تاريخ النشر
2021-03-08
·
تاريخ التحديث
2021-03-17
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Netgear ProSafe Plus JGS516PE version 2.6.0.43
Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43
Description:
The issue is related to errors in the authentication procedure of the NSDP protocol implementation. This allows a remote attacker to bypass access controls and gain full control of the device.
Recommendations:
For Netgear ProSafe Plus JGS516PE version 2.6.0.43, update to a version that fixes the authentication issue in the NSDP protocol implementation.
For Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43, update to a version that fixes the authentication issue in the NSDP protocol implementation.
As a temporary workaround, consider restricting access to the NSDP protocol implementation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾