CVE-2020-35227

Vulnerability

A buffer overflow vulnerability exists in the access control section of the administration web panel on NETGEAR JGS516PE and GS116Ev2 switches running firmware version 2.6.0.43. The overflow occurs when processing the checkedList parameter in the delete command, allowing an attacker to inject arbitrary IP addresses into the whitelist [1].

Exploitation

An attacker with network access to the management interface and valid administrative credentials can send a crafted HTTP request with a malicious checkedList parameter to the delete command. This triggers the buffer overflow, enabling the injection of IP addresses into the whitelist [1].

Impact

Successful exploitation allows the attacker to add unauthorized IP addresses to the whitelist, potentially bypassing access controls and gaining unauthorized network access. While the primary described impact is whitelist manipulation, the buffer overflow could also lead to more severe consequences such as arbitrary code execution [1].

Mitigation

NETGEAR has released a firmware update to address this vulnerability. Users should upgrade to the latest firmware version for their devices. If an update is not immediately available, restrict access to the management interface to trusted networks only [1].