CVE-2020-5621
Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and…
Does this matter?
Lower severity and a low EPSS score (0.79%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- EPSS
- 0.79% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- netgear/gs716tv2 firmware · netgear/gs724tv3 firmware
- Source
- vultures@jpcert.or.jp
References
- http://jvn.jp/en/jp/JVN29903998/index.htmlThird Party Advisory
- https://jvn.jp/en/jp/JVN29903998/index.htmlThird Party Advisory
- https://www.netgear.com/support/product/gs716Tv2.aspxPatch, Vendor Advisory
- https://www.netgear.com/support/product/gs724tv3.aspxPatch, Vendor Advisory
- http://jvn.jp/en/jp/JVN29903998/index.htmlThird Party Advisory
- https://jvn.jp/en/jp/JVN29903998/index.htmlThird Party Advisory
- https://www.netgear.com/support/product/gs716Tv2.aspxPatch, Vendor Advisory
- https://www.netgear.com/support/product/gs724tv3.aspxPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.