CVE-2019-20672: XSS
Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20672?
CVE-2019-20672 is classified as a stored cross-site scripting (XSS) vulnerability affecting certain NETGEAR devices.
How do I fix CVE-2019-20672?
To fix CVE-2019-20672, update your NETGEAR device to firmware version 2.3.5.30 or later.
Which NETGEAR devices are affected by CVE-2019-20672?
CVE-2019-20672 affects NETGEAR RBR50, RBS50, and RBK50 devices running firmware versions earlier than 2.3.5.30.
Can CVE-2019-20672 be exploited remotely?
Yes, CVE-2019-20672 can be exploited remotely if an attacker can inject malicious scripts into web applications running on the affected devices.
What is the impact of CVE-2019-20672?
The impact of CVE-2019-20672 includes the potential for attackers to execute arbitrary JavaScript in the context of the victim's session on the affected NETGEAR devices.