CVE-2020-5621

2020-08-2804:05:28

jpcert

www.cve.org

4.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.5%

JSON

Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.

CNA Affected

[
  {
    "product": "Multiple NETGEAR switching hubs",
    "vendor": "Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science",
    "versions": [
      {
        "status": "affected",
        "version": "GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier"
      }
    ]
  }
]