CVE-2020-35233

Vulnerability

The TFTP server on NETGEAR JGS516PE and GS116Ev2 switches running firmware version 2.6.0.43 fails to properly handle multiple concurrent connections. This allows an external attacker to force a device reboot by sending a high volume of simultaneous TFTP requests, as documented in [1].

Exploitation

An unauthenticated attacker with network access to the TFTP server can exploit this vulnerability simply by initiating multiple concurrent TFTP connections. No authentication or user interaction is required; the attacker only needs the ability to send packets to the switch's TFTP port.

Impact

Successful exploitation causes the switch to reboot, resulting in a denial of service (DoS). All network services are temporarily interrupted until the device completes the reboot cycle. No data is compromised, but network availability is impacted until the switch recovers.

Mitigation

As of the advisory publication, no firmware update has been released by NETGEAR [1]. Recommended workarounds include disabling the TFTP service on the switch or restricting network access to it via firewall rules. The device may be end-of-life; users should consult NETGEAR support for further guidance.