CVE-2020-35233: NETGEAR GS116E Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent connections, aka a denial of service attack.

Affected products

  • NETGEAR GS116E Firmware: version 2.6.0.43 only
  • NETGEAR JGS516PE Firmware: version 2.6.0.43 only

Published 2021-03-10. Last modified 2026-06-17.