What is CVE-2019-20487?

CVE-2019-20487 is a high-severity vulnerability in Netgear Wnr1000, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2020-03-02.

How severe is CVE-2019-20487?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Netgear Wnr1000

CVE-2019-20487

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an unauthenticated GET request (exploitable directly or through CSRF), as demonstrated by the set…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (36.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Netgear Wnr1000 — versions 4
Netgear Wnr1000_firmware — versions 1.1.0.54
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-20487?: CVE-2019-20487 is a high-severity vulnerability in Netgear Wnr1000, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2020-03-02.
How severe is CVE-2019-20487?: High severity. CVSS v3 base score is 8.8 out of 10.