PT-2019-7660 · NetGear · Netgear Ex7000

Jamie Riden · Publicado 2019-08-08 · Atualizado 2019-08-19 · CVE-2016-10864

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Média

Vetor base

AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR EX7000 version 1.0.0.42 1.0.94

Description The issue allows for XSS via the SSID.

Recommendations For NETGEAR EX7000 version 1.0.0.42 1.0.94, consider changing the SSID to a value that does not contain malicious code as a temporary workaround until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-10864

Produtos afetados

Netgear Ex7000

Referências · 3

• 🔥 https://pentestpartners.com/security-blog/netgear-ex7000-wi-fi-range-extender-minor-xss-and-poor-password-handling · Exploit
• https://osv.dev/vulnerability/CVE-2016-10864 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-10864 · Nota de Segurança