CVE-2020-35801 Misconfiguration in n/a

High 8.3 Published 29 Dec 2020 Updated 4 Aug 2024

An active TFTP server allows authenticated remote users to update switch firmware, potentially leading to code execution or privilege escalation.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-35801?

CVE-2020-35801 is a high-severity vulnerability in n/a, published on 29 Dec 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to update the switch firmware.

Which versions are affected by CVE-2020-35801?

It affects 4 products.

Products include Netgear Gs116e Firmware, Netgear Jgs516pe Firmware, Netgear Jgs524e Firmware, Netgear Jgs524pe Firmware.

How do I fix CVE-2020-35801?

No fix has been published for CVE-2020-35801 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-35801 being exploited?

There is no known exploitation of CVE-2020-35801 in the wild and no public exploit code.

Sources

Also known as CVE-2020-35220, GHSA-27g2-h3jp-46x8.