What’s Vulnerable › Vulnerabilities

CVE-2020-35778

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-30 · updated 2026-06-17
• Weakness: CWE-352

Description

Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36.

Affected products

• NETGEAR Gs716T Firmware: before 6.3.1.36 — fixed in 6.3.1.36
• NETGEAR Gs724T Firmware: before 6.3.1.36 — fixed in 6.3.1.36

How to fix

Upgrade to a fixed version: NETGEAR Gs716T Firmware 6.3.1.36; NETGEAR Gs724T Firmware 6.3.1.36. Check the vendor advisory for mitigations.

References

• https://kb.netgear.com/000062721/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Smart-Managed-Pro-Switches-PSV-2020-0368
• https://kb.netgear.com/000062721/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Smart-Managed-Pro-Switches-PSV-2020-0368

Get alerted when CVE-2020-35778 or the next vulnerability affects your stack