CSRF in NETGEAR Gs716t
CVE-2020-5621
Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.
EPSS exploit prediction
EPSS: 0.008 (54.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 55th percentile — 54.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
- NETGEAR Gs716t — versions v2
- NETGEAR Gs716tv2 Firmware
- NETGEAR Gs724t — versions v3
- NETGEAR Gs724tv3 Firmware
- Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, Riken Center For Multiple NETGEAR Switching Hubs — versions GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier
Weakness classification (CWE)
References
- www.netgear.com/support/product/gs716Tv2.aspx (Patch, Vendor Advisory)
- www.netgear.com/support/product/gs724tv3.aspx (Patch, Vendor Advisory)
- jvn.jp/en/jp/JVN29903998/index.html (Third Party Advisory)
- jvn.jp/en/jp/JVN29903998/index.html (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2020-5621?
- CVE-2020-5621 is a medium-severity vulnerability in NETGEAR Gs716t, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.3/10. Published 2020-08-28.
- How severe is CVE-2020-5621?
- Medium severity. CVSS v3 base score is 4.3 out of 10.