PT-2020-17461 · NetGear · Rbr40+14

Aircut

·

Published

2020-12-29

·

Updated

2020-12-31

·

CVE-2020-35821

CVSS v3.1

6.1

Medium

VectorAC:L/AV:A/A:N/C:H/I:H/PR:H/S:U/UI:N
Name of the Vulnerable Software and Affected Versions D7800 versions prior to 1.0.1.56 R7800 versions prior to 1.0.2.74 R8900 version 1.0.4.28 and earlier R9000 version 1.0.4.28 and earlier RAX120 versions prior to 1.0.0.78 RBK20 versions prior to 2.3.5.26 RBR20 versions prior to 2.3.5.26 RBS20 versions prior to 2.3.5.26 RBK40 versions prior to 2.3.5.30 RBR40 versions prior to 2.3.5.30 RBS40 versions prior to 2.3.5.30 RBK50 versions prior to 2.3.5.30 RBR50 versions prior to 2.3.5.30 RBS50 versions prior to 2.3.5.30 XR700 versions prior to 1.0.1.10
Description The issue is related to stored XSS, affecting certain NETGEAR devices.
Recommendations For D7800, update to version 1.0.1.56 or later. For R7800, update to version 1.0.2.74 or later. For R8900, update to version 1.0.4.28 or later. For R9000, update to version 1.0.4.28 or later. For RAX120, update to version 1.0.0.78 or later. For RBK20, update to version 2.3.5.26 or later. For RBR20, update to version 2.3.5.26 or later. For RBS20, update to version 2.3.5.26 or later. For RBK40, update to version 2.3.5.30 or later. For RBR40, update to version 2.3.5.30 or later. For RBS40, update to version 2.3.5.30 or later. For RBK50, update to version 2.3.5.30 or later. For RBR50, update to version 2.3.5.30 or later. For RBS50, update to version 2.3.5.30 or later. For XR700, update to version 1.0.1.10 or later.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-35821

Affected Products

D7800
R7800
R8900
R9000
Rax120
Rbk20
Rbk40
Rbk50
Rbr20
Rbr40
Rbr50
Rbs20
Rbs40
Rbs50
Xr700