CVE-2020-35231

Name of the Vulnerable Software and Affected Versions: Netgear ProSafe Plus JGS516PE version 2.6.0.43 Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43

Description: The issue is related to errors in the authentication procedure of the NSDP protocol implementation. This allows a remote attacker to bypass access controls and gain full control of the device.

Recommendations: For Netgear ProSafe Plus JGS516PE version 2.6.0.43, update to a version that fixes the authentication issue in the NSDP protocol implementation. For Netgear ProSAFE Plus GS116Ev2 version 2.6.0.43, update to a version that fixes the authentication issue in the NSDP protocol implementation. As a temporary workaround, consider restricting access to the NSDP protocol implementation until a patch is available.