PT-2020-17446
CVE-2020-35806
·
Published
2020-12-29
·
Updated
2021-01-04
Description by
CVSS 3.1
6.0
MediumMetricsAC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N
Name of the Vulnerable Software and Affected Versions
D7800 versions prior to 1.0.1.56
R7500v2 versions prior to 1.0.3.46
R7800 versions prior to 1.0.2.68
RAX120 versions prior to 1.0.0.78
RBK22 versions prior to 2.3.5.26
RBR20 versions prior to 2.3.5.26
RBS20 versions prior to 2.3.5.26
RBK40 versions prior to 2.3.5.30
RBR40 versions prior to 2.3.5.30
RBS40 versions prior to 2.3.5.30
RBK50 versions prior to 2.3.5.30
RBR50 versions prior to 2.3.5.30
RBS50 versions prior to 2.3.5.30
WN3000RPv2 versions prior to 1.0.0.78
Description
The issue is related to stored XSS, affecting certain NETGEAR devices.
Recommendations
For D7800 version prior to 1.0.1.56, update to version 1.0.1.56 or later.
For R7500v2 version prior to 1.0.3.46, update to version 1.0.3.46 or later.
For R7800 version prior to 1.0.2.68, update to version 1.0.2.68 or later.
For RAX120 version prior to 1.0.0.78, update to version 1.0.0.78 or later.
For RBK22 version prior to 2.3.5.26, update to version 2.3.5.26 or later.
For RBR20 version prior to 2.3.5.26, update to version 2.3.5.26 or later.
For RBS20 version prior to 2.3.5.26, update to version 2.3.5.26 or later.
For RBK40 version prior to 2.3.5.30, update to version 2.3.5.30 or later.
For RBR40 version prior to 2.3.5.30, update to version 2.3.5.30 or later.
For RBS40 version prior to 2.3.5.30, update to version 2.3.5.30 or later.
For RBK50 version prior to 2.3.5.30, update to version 2.3.5.30 or later.
For RBR50 version prior to 2.3.5.30, update to version 2.3.5.30 or later.
For RBS50 version prior to 2.3.5.30, update to version 2.3.5.30 or later.
For WN3000RPv2 version prior to 1.0.0.78, update to version 1.0.0.78 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾