CVE-2020-35227: NETGEAR GS116E Firmware

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attacker to inject IP addresses into the whitelist via the checkedList parameter to the delete command.

Affected products

  • NETGEAR GS116E Firmware: version 2.6.0.43 only
  • NETGEAR JGS516PE Firmware: version 2.6.0.43 only

Published 2021-03-10. Last modified 2026-06-17.