VULNERABILITY INTELLIGENCE

CVE-2020-5641

CVSS score6.5 MEDIUM
EPSS probability0.64%
CISA KEVNot currently listed
Published2020-11-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the product's settings may be changed without the user's intention or consent via unspecified vectors.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references