PT-2020-8264 · NetGear · Netgear Ex3800+6

Published 2020-04-24 · Updated 2020-04-28 · CVE-2017-18715

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: NETGEAR EX3700 versions prior to 1.0.0.66 NETGEAR EX3800 versions prior to 1.0.0.66 NETGEAR EX6100 versions prior to 1.0.2.20 NETGEAR EX6120 versions prior to 1.0.0.34 NETGEAR EX6150 versions prior to 1.0.0.36 NETGEAR EX6200 versions prior to 1.0.3.84 NETGEAR EX7000 versions prior to 1.0.0.60

Description: The issue is related to reflected XSS, affecting certain NETGEAR devices.

Recommendations: For NETGEAR EX3700 versions prior to 1.0.0.66, update to version 1.0.0.66 or later. For NETGEAR EX3800 versions prior to 1.0.0.66, update to version 1.0.0.66 or later. For NETGEAR EX6100 versions prior to 1.0.2.20, update to version 1.0.2.20 or later. For NETGEAR EX6120 versions prior to 1.0.0.34, update to version 1.0.0.34 or later. For NETGEAR EX6150 versions prior to 1.0.0.36, update to version 1.0.0.36 or later. For NETGEAR EX6200 versions prior to 1.0.3.84, update to version 1.0.3.84 or later. For NETGEAR EX7000 versions prior to 1.0.0.60, update to version 1.0.0.60 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-18715

Affected Products

Netgear Ex3700

Netgear Ex3800

Netgear Ex6100

Netgear Ex6120

Netgear Ex6150

Netgear Ex6200

Netgear Ex7000

References · 5

• https://osv.dev/vulnerability/CVE-2017-18715 · Vendor Advisory
• https://kb.netgear.com/000053133/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Extenders-PSV-2016-0075 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18715 · Security Note
• https://t.me/cvenotify/3185 · Telegram Post
• https://t.me/cibsecurity/11626 · Telegram Post