PT-2020-8811 · NetGear · Ex6150V2+21
Aircut
·
Published
2020-04-27
·
Updated
2020-05-05
·
CVE-2018-21167
CVSS v3.1
5.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
D6100 versions prior to 1.0.0.57
DM200 versions prior to 1.0.0.50
EX2700 versions prior to 1.0.1.32
EX6100v2 versions prior to 1.0.1.70
EX6150v2 versions prior to 1.0.1.70
EX6200v2 versions prior to 1.0.1.62
EX6400 versions prior to 1.0.1.78
EX7300 versions prior to 1.0.1.78
EX8000 versions prior to 1.0.0.114
R6100 versions prior to 1.0.1.22
R7500 versions prior to 1.0.0.122
R7800 versions prior to 1.0.2.42
R8900 versions prior to 1.0.3.10
R9000 versions prior to 1.0.3.10
WN2000RPTv3 versions prior to 1.0.1.26
WN3000RPv3 versions prior to 1.0.2.66
WN3100RPv2 versions prior to 1.0.0.42
WNDR3700v4 versions prior to 1.0.2.96
WNDR4300 versions prior to 1.0.2.98
WNDR4300v2 versions prior to 1.0.0.54
WNDR4500v3 versions prior to 1.0.0.54
WNR2000v5 versions prior to 1.0.0.64
Description
Certain NETGEAR devices are affected by stored XSS.
Recommendations
Update D6100 to version 1.0.0.57 or later.
Update DM200 to version 1.0.0.50 or later.
Update EX2700 to version 1.0.1.32 or later.
Update EX6100v2 to version 1.0.1.70 or later.
Update EX6150v2 to version 1.0.1.70 or later.
Update EX6200v2 to version 1.0.1.62 or later.
Update EX6400 to version 1.0.1.78 or later.
Update EX7300 to version 1.0.1.78 or later.
Update EX8000 to version 1.0.0.114 or later.
Update R6100 to version 1.0.1.22 or later.
Update R7500 to version 1.0.0.122 or later.
Update R7800 to version 1.0.2.42 or later.
Update R8900 to version 1.0.3.10 or later.
Update R9000 to version 1.0.3.10 or later.
Update WN2000RPTv3 to version 1.0.1.26 or later.
Update WN3000RPv3 to version 1.0.2.66 or later.
Update WN3100RPv2 to version 1.0.0.42 or later.
Update WNDR3700v4 to version 1.0.2.96 or later.
Update WNDR4300 to version 1.0.2.98 or later.
Update WNDR4300v2 to version 1.0.0.54 or later.
Update WNDR4500v3 to version 1.0.0.54 or later.
Update WNR2000v5 to version 1.0.0.64 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
D6100
Dm200
Ex2700
Ex6100V2
Ex6150V2
Ex6200V2
Ex6400
Ex7300
Ex8000
R6100
R7500
R7800
R8900
R9000
Wn2000Rptv3
Wn3000Rpv3
Wn3100Rpv2
Wndr3700V4
Wndr4300
Wndr4300V2
Wndr4500V3
Wnr2000V5