CVEvulnerability
CVE-2019-20691
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-04-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 8.3 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Certain NETGEAR devices are affected by CSRF. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.24, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150v1 before 1.0.0.42, EX6200 before 1.0.3.88, EX7000 before 1.0.0.66, and WN2500RPv2 before 1.0.1.54.
Affected configurations
• netgear d3600 firmware (< 1.0.0.72)
• netgear d6000 firmware (< 1.0.0.72)
• netgear ex3700 firmware (< 1.0.0.70)
• netgear ex3800 firmware (< 1.0.0.70)
• netgear ex6000 firmware (< 1.0.0.30)
• netgear ex6100 firmware (< 1.0.2.24)
• netgear ex6120 firmware (< 1.0.0.40)
• netgear ex6130 firmware (< 1.0.0.22)
• netgear ex6150 firmware (< 1.0.0.42)
• netgear ex6200 firmware (< 1.0.3.88)
• netgear ex7000 firmware (< 1.0.0.66)
• netgear wn2500rp firmware (< 1.0.1.54)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness