CVE-2020-35783

Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switch configuration parameters by sending the corresponding read requests.

• https://kb.netgear.com/000062637/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0383Vendor Advisory
• https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/Not Applicable
• https://kb.netgear.com/000062637/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0383Vendor Advisory
• https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/Not Applicable

Published

Dec 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35778Certain NETGEAR devices are affected by CSRF. This affects G…8.8
• CVE-2020-35779NETGEAR NMS300 devices before 1.6.0.27 are affected by denia…8.6
• CVE-2020-3578A vulnerability in the web services interface of Cisco Adapt…6.5
• CVE-2020-35780NETGEAR NMS300 devices before 1.6.0.27 are affected by denia…6.5
• CVE-2020-35781NETGEAR NMS300 devices before 1.6.0.27 are affected by denia…6.5
• CVE-2020-35782Certain NETGEAR devices are affected by lack of access contr…8.1
• CVE-2020-35784Certain NETGEAR devices are affected by lack of access contr…7.2
• CVE-2020-35785NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd a…8.8
• CVE-2020-35786NETGEAR R7800 devices before 1.0.2.74 are affected by a buff…4.5
• CVE-2020-35787Certain NETGEAR devices are affected by a buffer overflow by…8
• CVE-2020-35788NETGEAR WAC104 devices before 1.0.4.13 are affected by a buf…6.8
• CVE-2020-35789NETGEAR NMS300 devices before 1.6.0.27 are affected by comma…8.8