CVE-2020-35778

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Dec 30, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-357798.6NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-35786.5A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) SCVE-2020-357806.5NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-357816.5NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-357828.1Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 beforCVE-2020-357836.5Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 beforeCVE-2020-357847.2Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE beforeCVE-2020-357858.8NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365).CVE-2020-357864.5NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user.CVE-2020-357878.0Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.7CVE-2020-357886.8NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user.CVE-2020-357898.8NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user.