PT-2020-8739 · NetGear · Netgear Srr60

Wayne Chin Yick Low · Published 2020-04-27 · Updated 2020-04-27 · CVE-2018-21095

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR SRR60 versions prior to 2.2.1.210 NETGEAR SRS60 versions prior to 2.2.1.210

Description The issue is related to stored XSS, affecting certain NETGEAR devices.

Recommendations For NETGEAR SRR60 versions prior to 2.2.1.210, update to version 2.2.1.210 or later. For NETGEAR SRS60 versions prior to 2.2.1.210, update to version 2.2.1.210 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-21095

Affected Products

Netgear Srr60

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-21095 · Security Note
• https://osv.dev/vulnerability/CVE-2018-21095 · Vendor Advisory
• https://kb.netgear.com/000060458/Security-Advisory-for-Stored-Cross-Site-Scripting-on-SRS60-and-SRR60-PSV-2018-0218 · Vendor Advisory
• https://t.me/cvenotify/3249 · Telegram Post