CVE-2020-5621 - CVE House
Back to Database
Status published Medium CVE-2020-5621

Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2...

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-5621

Credits & Attribution

No credits recorded in the NVD database.

References

More from Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science

View All →
CVE-2020-5664
Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier...
Critical 9.8
CVE-2020-5663
Stored cross-site scripting vulnerability in XooNIps 3.49 and earlier allows...
Medium 5.4
CVE-2020-5662
Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows...
Medium 5.4
CVE-2020-5659
SQL injection vulnerability in the XooNIps 3.49 and earlier allows...
High 8.8
CVE-2020-5625
Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote...
Medium 6.1

Affected Vendor

Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science

View all reports →

Affected Software

Multiple NETGEAR switching hubs
Vulnerable Versions:
GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier

Timeline

Official Publish: August 28th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.