CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.3. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2020-35801
Severity
HIGH
CVSS
8.3
EPSS
1.67%
Original NVD Description
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to update the switch firmware.
Related CVEs
Other vulnerabilities affecting the same vendor(s)