PT-2020-8249 · NetGear · R6700+23
Harie_Cool
·
Published
2020-04-24
·
Updated
2020-04-28
·
CVE-2017-18700
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
NETGEAR D6400 versions prior to 1.0.0.60
NETGEAR D7000 versions prior to 1.0.1.50
NETGEAR D8500 versions prior to 1.0.3.29
NETGEAR EX6200 versions prior to 1.0.3.84
NETGEAR EX7000 versions prior to 1.0.0.60
NETGEAR R6250 versions prior to 1.0.4.16
NETGEAR R6300v2 versions prior to 1.0.4.18
NETGEAR R6400 versions prior to 1.01.32
NETGEAR R6400v2 versions prior to 1.0.2.44
NETGEAR R6700 versions prior to 1.0.1.36
NETGEAR R6900 versions prior to 1.0.1.34
NETGEAR R6900P versions prior to 1.3.0.8
NETGEAR R7000 versions prior to 1.0.9.14
NETGEAR R7000P versions prior to 1.3.0.8
NETGEAR R7100LG versions prior to 1.0.0.34
NETGEAR R7300DST versions prior to 1.0.0.56
NETGEAR R7900 versions prior to 1.0.1.26
NETGEAR R8000 versions prior to 1.0.4.4
NETGEAR R8300 versions prior to 1.0.2.106
NETGEAR R8500 versions prior to 1.0.2.106
NETGEAR R9000 versions prior to 1.0.2.52
NETGEAR WNDR3400v3 versions prior to 1.0.1.16
NETGEAR WNR3500Lv2 versions prior to 1.2.0.46
NETGEAR WNDR3700v5 versions prior to 1.1.0.48
Description:
Certain NETGEAR devices are affected by stored XSS.
Recommendations:
Update D6400 to version 1.0.0.60 or later.
Update D7000 to version 1.0.1.50 or later.
Update D8500 to version 1.0.3.29 or later.
Update EX6200 to version 1.0.3.84 or later.
Update EX7000 to version 1.0.0.60 or later.
Update R6250 to version 1.0.4.16 or later.
Update R6300v2 to version 1.0.4.18 or later.
Update R6400 to version 1.01.32 or later.
Update R6400v2 to version 1.0.2.44 or later.
Update R6700 to version 1.0.1.36 or later.
Update R6900 to version 1.0.1.34 or later.
Update R6900P to version 1.3.0.8 or later.
Update R7000 to version 1.0.9.14 or later.
Update R7000P to version 1.3.0.8 or later.
Update R7100LG to version 1.0.0.34 or later.
Update R7300DST to version 1.0.0.56 or later.
Update R7900 to version 1.0.1.26 or later.
Update R8000 to version 1.0.4.4 or later.
Update R8300 to version 1.0.2.106 or later.
Update R8500 to version 1.0.2.106 or later.
Update R9000 to version 1.0.2.52 or later.
Update WNDR3400v3 to version 1.0.1.16 or later.
Update WNR3500Lv2 to version 1.2.0.46 or later.
Update WNDR3700v5 to version 1.1.0.48 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
D6400
D7000
D8500
Ex6200
Ex7000
R6250
R6300V2
R6400
R6400V2
R6700
R6900
R6900P
R7000
R7000P
R7100Lg
R7300Dst
R7900
R8000
R8300
R8500
R9000
Wndr3400V3
Wndr3700V5
Wnr3500Lv2