PT-2020-8334 · NetGear · R6700+60

Published

2020-04-22

·

Updated

2020-04-23

·

CVE-2017-18785

CVSS v3.1

4.8

Medium

VectorAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: D3600 versions 1.0.0.0 through 1.0.0.66 D6000 versions 1.0.0.0 through 1.0.0.66 D6100 versions 1.0.0.0 through 1.0.0.55 D6200 versions 1.0.0.0 through 1.1.00.23 D6220 versions 1.0.0.0 through 1.0.0.31 D6400 versions 1.0.0.0 through 1.0.0.65 D7000 versions 1.0.0.0 through 1.0.1.51 D7000v2 versions 1.0.0.0 through 1.0.0.43 D7800 versions 1.0.0.0 through 1.0.1.29 D8500 versions 1.0.0.0 through 1.0.3.34 DGN2200v4 versions 1.0.0.0 through 1.0.0.95 DGN2200Bv4 versions 1.0.0.0 through 1.0.0.95 EX2700 versions 1.0.0.0 through 1.0.1.27 EX6100v2 versions 1.0.0.0 through 1.0.1.53 EX6150v2 versions 1.0.0.0 through 1.0.1.53 EX6200v2 versions 1.0.0.0 through 1.0.1.51 EX6400 versions 1.0.0.0 through 1.0.1.71 EX7300 versions 1.0.0.0 through 1.0.1.71 EX8000 versions 1.0.0.0 through 1.0.0.101 JNR1010v2 versions 1.0.0.0 through 1.1.0.43 JWNR2010v5 versions 1.0.0.0 through 1.1.0.43 PR2000 versions 1.0.0.0 through 1.0.0.19 R6020 versions 1.0.0.0 through 1.0.0.25 R6080 versions 1.0.0.0 through 1.0.0.25 R6100 versions 1.0.0.0 through 1.0.1.19 R6250 versions 1.0.0.0 through 1.0.4.15 R6300v2 versions 1.0.0.0 through 1.0.4.17 R6400 versions 1.0.0.0 through 1.0.1.31 R6400v2 versions 1.0.0.0 through 1.0.2.45 R6700 versions 1.0.0.0 through 1.0.1.35 R6800 versions 1.0.0.0 through 1.2.0.11 R6900v2 versions 1.0.0.0 through 1.2.0.11 R6700v2 versions 1.0.0.0 through 1.2.0.11 R6900 versions 1.0.0.0 through 1.0.1.33 R6900P versions 1.0.0.0 through 1.3.0.7 R7000 versions 1.0.0.0 through 1.0.9.17 R7000P versions 1.0.0.0 through 1.3.0.7 R7100LG versions 1.0.0.0 through 1.0.0.33 R7300DST versions 1.0.0.0 through 1.0.0.57 R7500 versions 1.0.0.0 through 1.0.0.117 R7500v2 versions 1.0.0.0 through 1.0.3.23 R7800 versions 1.0.0.0 through 1.0.2.39 R7900 versions 1.0.0.0 through 1.0.2.3 R7900P versions 1.0.0.0 through 1.1.5.13 R8000 versions 1.0.0.0 through 1.0.4.3 R8000P versions 1.0.0.0 through 1.1.5.13 R8500 versions 1.0.0.0 through 1.0.2.109 R8300 versions 1.0.0.0 through 1.0.2.109 R9000 versions 1.0.0.0 through 1.0.2.51 WN2000RPTv3 versions 1.0.0.0 through 1.0.1.7 WN3000RPv3 versions 1.0.0.0 through 1.0.2.49 WN3100RPv2 versions 1.0.0.0 through 1.0.0.41 WNDR3400v3 versions 1.0.0.0 through 1.0.1.15 WNDR3700v4 versions 1.0.0.0 through 1.0.2.93 WNDR4300 versions 1.0.0.0 through 1.0.2.95 WNDR4300v2 versions 1.0.0.0 through 1.0.0.49 WNDR4500v3 versions 1.0.0.0 through 1.0.0.49 WNR1000v4 versions 1.0.0.0 through 1.1.0.43 WNR2000v5 versions 1.0.0.0 through 1.0.0.61 WNR2020 versions 1.0.0.0 through 1.1.0.43 WNR2050 versions 1.0.0.0 through 1.1.0.43 WNR3500Lv2 versions 1.0.0.0 through 1.2.0.45
Description: Certain NETGEAR devices are affected by a Cross-Site Scripting (XSS) issue.
Recommendations: Update D3600 to version 1.0.0.67 or later. Update D6000 to version 1.0.0.67 or later. Update D6100 to version 1.0.0.56 or later. Update D6200 to version 1.1.00.24 or later. Update D6220 to version 1.0.0.32 or later. Update D6400 to version 1.0.0.66 or later. Update D7000 to version 1.0.1.52 or later. Update D7000v2 to version 1.0.0.44 or later. Update D7800 to version 1.0.1.30 or later. Update D8500 to version 1.0.3.35 or later. Update DGN2200v4 to version 1.0.0.96 or later. Update DGN2200Bv4 to version 1.0.0.96 or later. Update EX2700 to version 1.0.1.28 or later. Update EX6100v2 to version 1.0.1.54 or later. Update EX6150v2 to version 1.0.1.54 or later. Update EX6200v2 to version 1.0.1.52 or later. Update EX6400 to version 1.0.1.72 or later. Update EX7300 to version 1.0.1.72 or later. Update EX8000 to version 1.0.0.102 or later. Update JNR1010v2 to version 1.1.0.44 or later. Update JWNR2010v5 to version 1.1.0.44 or later. Update PR2000 to version 1.0.0.20 or later. Update R6020 to version 1.0.0.26 or later. Update R6080 to version 1.0.0.26 or later. Update R6100 to version 1.0.1.20 or later. Update R6250 to version 1.0.4.16 or later. Update R6300v2 to version 1.0.4.18 or later. Update R6400 to version 1.0.1.32 or later. Update R6400v2 to version 1.0.2.46 or later. Update R6700 to version 1.0.1.36 or later. Update R6800 to version 1.2.0.12 or later. Update R6900v2 to version 1.2.0.12 or later. Update R6700v2 to version 1.2.0.12 or later. Update R6900 to version 1.0.1.34 or later. Update R6900P to version 1.3.0.8 or later. Update R7000 to version 1.0.9.18 or later. Update R7000P to version 1.3.0.8 or later. Update R7100LG to version 1.0.0.34 or later. Update R7300DST to version 1.0.0.58 or later. Update R7500 to version 1.0.0.118 or later. Update R7500v2 to version 1.0.3.24 or later. Update R7800 to version 1.0.2.40 or later. Update R7900 to version 1.0.2.4 or later. Update R7900P to version 1.1.5.14 or later. Update R8000 to version 1.0.4.4 or later. Update R8000P to version 1.1.5.14 or later. Update R8500 to version 1.0.2.110 or later. Update R8300 to version 1.0.2.110 or later. Update R9000 to version 1.0.2.52 or later. Update WN2000RPTv3 to version 1.0.1.8 or later. Update WN3000RPv3 to version 1.0.2.50 or later. Update WN3100RPv2 to version 1.0.0.42 or later. Update WNDR3400v3 to version 1.0.1.16 or later. Update WNDR3700v4 to version 1.0.2.94 or later. Update WNDR4300 to version 1.0.2.96 or later. Update WNDR4300v2 to version 1.0.0.50 or later. Update WNDR4500v3 to version 1.0.0.50 or later. Update WNR1000v4 to version 1.1.0.44 or later. Update WNR2000v5 to version 1.0.0.62 or later. Update WNR2020 to version 1.1.0.44 or later. Update WNR2050 to version 1.1.0.44 or later. Update WNR3500Lv2 to version 1.2.0.46 or later.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-18785

Affected Products

D3600
D6000
D6100
D6200
D6220
D6400
D7000
D7000V2
D7800
D8500
Dgn2200V4
Ex2700
Ex6100V2
Ex6150V2
Ex6200V2
Ex6400
Ex7300
Ex8000
Jnr1010V2
Jwnr2010V5
Pr2000
R6020
R6080
R6100
R6250
R6300V2
R6400
R6400V2
R6700
R6700V2
R6800
R6900
R6900P
R6900V2
R7000
R7000P
R7100Lg
R7300Dst
R7500
R7500V2
R7800
R7900
R7900P
R8000
R8000P
R8300
R8500
R9000
Wn2000Rptv3
Wn3000Rpv3
Wn3100Rpv2
Wndr3400V3
Wndr3700V4
Wndr4300
Wndr4300V2
Wndr4500V3
Wnr1000V4
Wnr2000V5
Wnr2020
Wnr2050
Wnr3500Lv2