PT-2020-5883 · NetGear · Netgear Wc7600+3

Ghost_Fh · Published 2020-09-17 · Updated 2020-10-15 · CVE-2020-26923

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: NETGEAR WC7500 versions prior to 6.5.5.24 NETGEAR WC7600 versions prior to 6.5.5.24 NETGEAR WC7600v2 versions prior to 6.5.5.24 NETGEAR WC9500 versions prior to 6.5.5.24

Description: The issue is related to stored XSS and is caused by the failure to protect the web page structure. This could allow a remote attacker to perform cross-site scripting attacks.

Recommendations: For NETGEAR WC7500 versions prior to 6.5.5.24, update to version 6.5.5.24 or later. For NETGEAR WC7600 versions prior to 6.5.5.24, update to version 6.5.5.24 or later. For NETGEAR WC7600v2 versions prior to 6.5.5.24, update to version 6.5.5.24 or later. For NETGEAR WC9500 versions prior to 6.5.5.24, update to version 6.5.5.24 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2021-01972

CVE-2020-26923

Affected Products

Netgear Wc7500

Netgear Wc7600

Netgear Wc7600V2

Netgear Wc9500

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-26923 · Security Note
• https://kb.netgear.com/000062329/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Wireless-Controllers-PSV-2020-0180 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26923 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01972 · Security Note
• https://cxsecurity.com/cveshow/CVE-2020-26923 · Note