PT-2020-10713 · NetGear · Rbr50+27

Published 2020-04-16 · Updated 2020-05-05 · CVE-2019-20738

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR D6100 versions 1.0.0.0 through 1.0.0.57 NETGEAR D7800 versions 1.0.0.0 through 1.0.1.33 NETGEAR JNR1010v2 versions 1.0.0.0 through 1.1.0.49 NETGEAR JWNR2010v5 versions 1.0.0.0 through 1.1.0.49 NETGEAR RBK50 versions 2.0.0.0 through 2.3.5.29 NETGEAR RBR50 versions 2.0.0.0 through 2.3.5.29 NETGEAR RBS50 versions 2.0.0.0 through 2.3.5.29 NETGEAR R6020 versions 1.0.0.0 through 1.0.0.29 NETGEAR R6080 versions 1.0.0.0 through 1.0.0.29 NETGEAR R6100 versions 1.0.0.0 through 1.0.1.15 NETGEAR R6120 versions 1.0.0.0 through 1.0.0.39 NETGEAR R6700v2 versions 1.0.0.0 through 1.2.0.13 NETGEAR R6800 versions 1.0.0.0 through 1.2.0.13 NETGEAR R6900v2 versions 1.0.0.0 through 1.2.0.13 NETGEAR R7500v2 versions 1.0.0.0 through 1.0.3.25 NETGEAR R7800 versions 1.0.0.0 through 1.0.2.45 NETGEAR R9000 versions 1.0.0.0 through 1.0.4.1 NETGEAR WN3000RPv2 versions 1.0.0.0 through 1.0.0.51 NETGEAR WN3000RPv3 versions 1.0.0.0 through 1.0.2.77 NETGEAR WNDR3700v4 versions 1.0.0.0 through 1.0.2.101 NETGEAR WNDR3700v5 versions 1.0.0.0 through 1.1.0.53 NETGEAR WNDR4300v1 versions 1.0.0.0 through 1.0.2.103 NETGEAR WNDR4300v2 versions 1.0.0.0 through 1.0.0.47 NETGEAR WNDR4500v3 versions 1.0.0.0 through 1.0.0.47 NETGEAR WNR1000v4 versions 1.0.0.0 through 1.1.0.49 NETGEAR WNR2000v5 versions 1.0.0.0 through 1.0.0.63 NETGEAR WNR2020 versions 1.0.0.0 through 1.1.0.49 NETGEAR WNR2050 versions 1.0.0.0 through 1.1.0.49

Description Certain NETGEAR devices are affected by stored XSS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-20738

Affected Products

D6100

D7800

Jnr1010V2

Jwnr2010V5

R6020

R6080

R6100

R6120

R6700V2

R6800

R6900V2

R7500V2

R7800

R9000

Rbk50

Rbr50

Rbs50

Wn3000Rpv2

Wn3000Rpv3

Wndr3700V4

Wndr3700V5

Wndr4300V1

Wndr4300V2

Wndr4500V3

Wnr1000V4

Wnr2000V5

Wnr2020

Wnr2050

References · 4

• https://kb.netgear.com/000061187/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-System-PSV-2016-0100 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20738 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20738 · Security Note
• https://t.me/cvenotify/2866 · Telegram Post