CSRF in NETGEAR Gs716t
CVE-2020-5621
Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.008 (52.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Netgear Gs716t — versions v2
- Netgear Gs716tv2_firmware
- Netgear Gs724t — versions v3
- Netgear Gs724tv3_firmware
- Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, Riken Center For Multiple Netgear Switching Hubs — versions GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (Patch, x_refsource_MISC, Vendor Advisory)
- vultures@jpcert.or.jp (Patch, x_refsource_MISC, Vendor Advisory)
- vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)
- vultures@jpcert.or.jp (Third Party Advisory, x_refsource_JVN, third-party-advisory)
Frequently asked questions
- What is CVE-2020-5621?
- CVE-2020-5621 is a medium-severity vulnerability in NETGEAR Gs716t, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.3/10. Published 2020-08-28.
- How severe is CVE-2020-5621?
- Medium severity. CVSS v3 base score is 4.3 out of 10.