Insecure Password Hashing in NETGEAR ProSafe Plus Switches

CVE-2020-35221

Summary

The NETGEAR ProSafe Plus switches, specifically the JGS516PE and GS116Ev2 models, are affected by a weakness in the password authentication hashing algorithm. This flaw enables attackers who can capture network traffic to generate multiple hash collisions, potentially allowing them to deduce valid passwords or infer elements of the original password. The implications of this vulnerability can lead to unauthorized access and compromise the integrity of network operations.

References