CVE-2020-5641

—

CVSS 3.1

6.5 medium

EPSS

<1%p48

Published

Nov 24, 2020 (Nov 24, 2020)

Modified

Jun 17, 2026

Description

Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the product's settings may be changed without the user's intention or consent via unspecified vectors.

Vendors: netgear
Products: gs108ev3 firmware
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.