March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Wacatac Spreads Its Attacks Using Archive Attachments
August 31, 2020
Rewterz Threat Alert – Face Mask Manufacturer Lure Delivers Agent Tesla Malware
September 1, 2020
Rewterz Threat Alert – Wacatac Spreads Its Attacks Using Archive Attachments
August 31, 2020
Rewterz Threat Alert – Face Mask Manufacturer Lure Delivers Agent Tesla Malware
September 1, 2020
Severity
Medium
Analysis Summary
Multiple NETGEAR products are vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to perform unauthorized actions. An attacker could exploit this vulnerability to alter the settings of the device, Web cache poisoning, and other malicious activities.
Impact
Cross-site request forgery
Affected Vendors
NETGEAR
Affected Products
- NETGEAR GS716Tv2 5.4.2.30
- NETGEAR GS724Tv3 5.4.2.30
Remediation
Refer to NETGEAR advisory for the complete list of affected products and their respective patches.