Security readout for executives and security teams
Plain-English summary
This issue can let a malformed NSDP write request crash or disrupt affected NETGEAR ProSAFE Plus switches. The business impact is availability: network segments depending on these switches may lose connectivity or management stability. The provided sources do not name active exploitation, a CVSS score, or a confirmed vendor fix.
Executive priority
Handle as a targeted availability risk for affected network hardware, not as confirmed internet-scale exploitation. Prioritize verification in sites where these switches support critical connectivity, operational technology, security systems, or customer-facing services.
Technical view
CVE-2020-35225 is improper length validation for string parameters in NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices. The documented outcome is potential denial of service. The source bundle does not provide CWE mapping, exploit details, patch version, or vendor remediation text.
Likely exposure
Exposure appears limited to environments running NETGEAR JGS516PE or GS116Ev2 switches at firmware v2.6.0.43 where NSDP write requests are reachable. The CVE affected-products metadata is incomplete, so confirm models and firmware directly from asset inventory or device management records.
Exploitation context
The sources describe potential denial of service but do not state exploitation in the wild. The CVE is not listed as KEV in the bundle. Treat exploit status as unconfirmed unless new vendor, CISA, or trusted telemetry evidence says otherwise.
Researcher notes
Evidence is sparse: the CVE description and NCC Group advisory reference identify the protocol flaw and DoS impact, but no CVSS, CWE, KEV status, exploit status, or patch detail is provided in the bundle. Avoid assumptions beyond the named models, firmware, and denial-of-service class.
Mitigation direction
- Check NETGEAR guidance for fixed firmware or official mitigations.
- Restrict switch management and discovery access to trusted administration networks.
- Remove affected switches from untrusted or guest-accessible network paths.
- Prioritize replacement or isolation where firmware status cannot be verified.
- Monitor affected switches for unexpected reboots or management instability.
Validation and detection
- Inventory NETGEAR JGS516PE and GS116Ev2 switches.
- Confirm whether firmware version v2.6.0.43 is present.
- Identify networks that can reach NSDP-related management traffic.
- Review logs or monitoring for denial-of-service symptoms.
- Document remediation status per device and network segment.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2020-35225 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.