Lucene search

[email protected]CVE-2020-35817

HistoryDec 30, 2020 - 12:15 a.m.

CVE-2020-35817

2020-12-3000:15:00

CWE-79

[email protected]

web.nvd.nist.gov

netgear

stored xss

vulnerability

cve-2020-35817

nvd

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

7 High

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

22.4%

JSON

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.

CPENameOperatorVersion
netgear:d7800_firmwarenetgear d7800 firmwarelt1.0.1.56
netgear:r7500v2_firmwarenetgear r7500v2 firmwarelt1.0.3.46
netgear:r7800_firmwarenetgear r7800 firmwarelt1.0.2.74
netgear:r8900_firmwarenetgear r8900 firmwarelt1.0.4.28
netgear:r9000_firmwarenetgear r9000 firmwarelt1.0.4.28
netgear:rax120_firmwarenetgear rax120 firmwarelt1.0.0.78
netgear:rbk50_firmwarenetgear rbk50 firmwarelt2.3.5.30
netgear:rbr50_firmwarenetgear rbr50 firmwarelt2.3.5.30
netgear:rbs50_firmwarenetgear rbs50 firmwarelt2.3.5.30
netgear:xr500_firmwarenetgear xr500 firmwarelt2.3.2.56

CPE	Name	Operator	Version
netgear:d7800_firmware	netgear d7800 firmware	lt	1.0.1.56
netgear:r7500v2_firmware	netgear r7500v2 firmware	lt	1.0.3.46
netgear:r7800_firmware	netgear r7800 firmware	lt	1.0.2.74
netgear:r8900_firmware	netgear r8900 firmware	lt	1.0.4.28
netgear:r9000_firmware	netgear r9000 firmware	lt	1.0.4.28
netgear:rax120_firmware	netgear rax120 firmware	lt	1.0.0.78
netgear:rbk50_firmware	netgear rbk50 firmware	lt	2.3.5.30
netgear:rbr50_firmware	netgear rbr50 firmware	lt	2.3.5.30
netgear:rbs50_firmware	netgear rbs50 firmware	lt	2.3.5.30
netgear:xr500_firmware	netgear xr500 firmware	lt	2.3.2.56

Rows per page:

1-10 of 111

References

kb.netgear.com/000062668/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-WiFi-Systems-PSV-2018-0493

Social References

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

7 High

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

22.4%

JSON

Related for CVE-2020-35817

cvelist1 prion1