VULNERABILITY INTELLIGENCE
CVE-2020-5621
CVSS score4.3 MEDIUM
EPSS probability0.79%
CISA KEVNot currently listed
Published2020-08-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.
Weakness classification
- nvd@nist.gov: CWE-352
Primary references
- vultures@jpcert.or.jp — Third Party Advisory
- vultures@jpcert.or.jp — Third Party Advisory
- vultures@jpcert.or.jp — Patch, Vendor Advisory
- vultures@jpcert.or.jp — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory