✕
Request a Demo
Rewterz
Rewterz Threat Alert – Wacatac Spreads Its Attacks Using Archive Attachments
August 31, 2020
Rewterz
Rewterz Threat Alert – Face Mask Manufacturer Lure Delivers Agent Tesla Malware
September 1, 2020

Rewterz Threat Advisory – CVE-2020-5621 – Multiple NETGEAR products cross-site request forgery

Severity

Medium

Analysis Summary

Multiple NETGEAR products are vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to perform unauthorized actions. An attacker could exploit this vulnerability to alter the settings of the device, Web cache poisoning, and other malicious activities.

Impact

Cross-site request forgery

Affected Vendors

NETGEAR

Affected Products

  • NETGEAR GS716Tv2 5.4.2.30
  • NETGEAR GS724Tv3 5.4.2.30

Remediation

Refer to NETGEAR advisory for the complete list of affected products and their respective patches.