PT-2020-17419 · NetGear · Netgear Gs724Tv4+1

Published 2020-12-29 · Updated 2020-12-30 · CVE-2020-35778

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR GS716Tv3 versions prior to 6.3.1.36 NETGEAR GS724Tv4 versions prior to 6.3.1.36

Description The issue affects certain NETGEAR devices, specifically due to a CSRF problem.

Recommendations For NETGEAR GS716Tv3 versions prior to 6.3.1.36, update to version 6.3.1.36 or later. For NETGEAR GS724Tv4 versions prior to 6.3.1.36, update to version 6.3.1.36 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-35778

Affected Products

Netgear Gs716Tv3

Netgear Gs724Tv4

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-35778 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35778 · Vendor Advisory
• https://kb.netgear.com/000062721/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Smart-Managed-Pro-Switches-PSV-2020-0368 · Vendor Advisory