Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the productβs settings may be changed without the userβs intention or consent via unspecified vectors.
https://jvn.jp/en/jp/JVN27806339/index.html
https://jvn.jp/en/jp/JVN27806339/index.html
https://kb.netgear.com/000062496/GS108Ev3-Firmware-Version-2-06-14
https://kb.netgear.com/000062496/GS108Ev3-Firmware-Version-2-06-14
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5641