netgear jgs516pe firmware 2.6.0.43 vulnerabilities and exploits

(subscribe to this query)

NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command.

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an malicious user to inject IP addresses into the whitelist via the checkedList parameter to the delete command.

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. Most of the integer parameters sent through the web server can be abused to cause a denial of service attack.

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an malicious user to bypass access controls and obtain full control of the device.

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external malicious users to force device reboots by sending concurrent connections, aka a denial of service attack.

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote malicious users to inject arbitrary web script or HTML via the language parameter.

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which allows attackers (with access to network traffic) to effectively gain administrative...

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in HTTP requests.

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated malicious users to force a device reboot.

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a network capture) to quickly generate multiple collisions to generate valid passwords, or infer some par...

Netgear Gs116e Firmware 2.6.0.43 Netgear Jgs516pe Firmware 2.6.0.43

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook