CVE-2020-5621

EPSS 0.16%
Published 28.08.2020 05:15:11
Last modified 21.11.2024 05:34:22
Source vultures@jpcert.or.jp
Teams watchlist Login
Open Login

Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Netgear ≫ Gs716tv2 Firmware Version <= 5.4.2.30

Netgear ≫ Gs716t Versionv2

Netgear ≫ Gs724tv3 Firmware Version <= 5.4.2.30

Netgear ≫ Gs724t Versionv3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.16%	0.33

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

http://jvn.jp/en/jp/JVN29903998/index.html

Third Party Advisory

https://jvn.jp/en/jp/JVN29903998/index.html

Third Party Advisory

https://www.netgear.com/support/product/gs716Tv2.aspx

Patch

Vendor Advisory

https://www.netgear.com/support/product/gs724tv3.aspx

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-5621

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-5621

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-5621

EUVD