CVE-2019-20486: XSS
Published Mar 2, 2020
·Updated
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and advindex.htm) within the web management console are vulnerable to stored XSS, as demonstrated by the configuration of the UI language.
Affected Software
2 affected components
Netgear Wnr1000 Firmware=1.1.0.54
Netgear WNR1000=4
Event History
Mar 2, 2020
CVE Published
via MITRE·03:06 PM
Data Sourced
via MITRE·03:06 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-20486.
2
What devices are affected by this vulnerability?
NETGEAR WNR1000V4 1.1.0.54 devices are affected by this vulnerability.
3
What is the severity rating of CVE-2019-20486?
The severity rating of CVE-2019-20486 is medium.
4
What is the CWE category of this vulnerability?
The CWE category of this vulnerability is CWE-79.
5
How can I mitigate the vulnerability?
To mitigate the vulnerability, update your NETGEAR WNR1000V4 device to a version that addresses this issue and avoid visiting suspicious or untrusted websites.