Cross site scripting

2020-04-2114:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

CPENameOperatorVersion
m4200_firmwarelt12.0.2.15
m4300-12x12f_firmwarelt12.0.2.15
m4300-24x24f_firmwarelt12.0.2.15
m4300-24x_firmwarelt12.0.2.15
m4300-28g-poe\\+_firmwarelt12.0.2.15
m4300-28g_firmwarelt12.0.2.15
m4300-48x_firmwarelt12.0.2.15
m4300-52g-poe\\+_firmwarelt12.0.2.15
m4300-52g_firmwarelt12.0.2.15
m4300-8x8f_firmwarelt12.0.2.15

Name	Operator	Version
m4200_firmware	lt	12.0.2.15
m4300-12x12f_firmware	lt	12.0.2.15
m4300-24x24f_firmware	lt	12.0.2.15
m4300-24x_firmware	lt	12.0.2.15
m4300-28g-poe\\+_firmware	lt	12.0.2.15
m4300-28g_firmware	lt	12.0.2.15
m4300-48x_firmware	lt	12.0.2.15
m4300-52g-poe\\+_firmware	lt	12.0.2.15
m4300-52g_firmware	lt	12.0.2.15
m4300-8x8f_firmware	lt	12.0.2.15