Cross site request forgery (csrf)

2020-08-2805:15:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.5%

JSON

Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.

CPENameOperatorVersion
gs716tv2_firmwarele5.4.2.30
gs724tv3_firmwarele5.4.2.30

CPE	Name	Operator	Version
	gs716tv2_firmware	le	5.4.2.30
	gs724tv3_firmware	le	5.4.2.30

References

jvn.jp/en/jp/JVN29903998/index.html

www.netgear.com/support/product/gs716Tv2.aspx

www.netgear.com/support/product/gs724tv3.aspx