Skip to content
OpenAdvisories
Unscored CVE-2020-5641 EUVD-2020-26802GHSA-492c-w6p5-gppm

Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the auth…

Published Nov 24, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the product's settings may be changed without the user's intention or consent via unspecified vectors.

Affected products

VendorProductAffectedFixed
Netgear Japan G.K. GS108Ev3 Firmware version 2.06.10 and earlier —

References