Medium severity5.3NVD Advisory· Published Jan 6, 2026· Updated Jun 17, 2026
CVE-2020-36908
CVE-2020-36908
Description
SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:securecomputing:snapgear_sg560_firmware:3.1.5:*:*:*:*:*:*:*
- Range: = 3.1.5
- Secure Computing/SnapGear Management Console SG560v5Range: 3.1.5
Patches
Vulnerability mechanics
References
5- packetstorm.news/files/id/157937nvdExploitThird Party Advisory
- www.exploit-db.com/exploits/48554nvdExploitThird Party AdvisoryVDB Entry
- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5567.phpnvdExploitThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/182969nvdThird Party Advisory
- www.vulncheck.com/advisories/secure-computing-snapgear-management-console-sg-cross-site-request-forgery-via-admin-usersnvdThird Party Advisory
News mentions
0No linked articles in our index yet.