CVE-2020-35229: NETGEAR GS116E Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not properly invalidated and can be reused until a new token is generated, which allows attackers (with access to network traffic) to effectively gain administrative privileges.

Affected products

  • NETGEAR GS116E Firmware: version 2.6.0.43 only
  • NETGEAR JGS516PE Firmware: version 2.6.0.43 only

Published 2021-03-10. Last modified 2026-06-17.