PT-2020-17448

CVE-2020-35808

·

Published

2020-12-29

·

Updated

2021-01-04

Description by

CVSS 3.1
4.8
Medium
MetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions NETGEAR D6100 versions prior to 1.0.0.63 NETGEAR DM200 versions prior to 1.0.0.61 NETGEAR R7800 versions prior to 1.0.2.52 NETGEAR R8900 versions prior to 1.0.4.12 NETGEAR R9000 versions prior to 1.0.4.12 NETGEAR WN3000RPv2 versions prior to 1.0.0.68 NETGEAR WNR2000v5 versions prior to 1.0.0.66
Description The issue is related to stored XSS, affecting certain NETGEAR devices.
Recommendations For NETGEAR D6100 version prior to 1.0.0.63, update to version 1.0.0.63 or later. For NETGEAR DM200 version prior to 1.0.0.61, update to version 1.0.0.61 or later. For NETGEAR R7800 version prior to 1.0.2.52, update to version 1.0.2.52 or later. For NETGEAR R8900 version prior to 1.0.4.12, update to version 1.0.4.12 or later. For NETGEAR R9000 version prior to 1.0.4.12, update to version 1.0.4.12 or later. For NETGEAR WN3000RPv2 version prior to 1.0.0.68, update to version 1.0.0.68 or later. For NETGEAR WNR2000v5 version prior to 1.0.0.66, update to version 1.0.0.66 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾