CVE-2020-5641: NETGEAR GS108EV3 Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the product's settings may be changed without the user's intention or consent via unspecified vectors.

Affected products

• NETGEAR GS108EV3 Firmware: up to and including 2.06.10

Published 2020-11-24. Last modified 2026-06-17.