CVE-2019-20756: XSS
Certain NETGEAR devices are affected by reflected XSS. This affects EX7000 before 1.0.0.64, EX6200 before 1.0.3.86, EX6150 before 1.0.0.38, EX6130 before 1.0.0.22, EX6120 before 1.0.0.40, EX6100 before 1.0.2.22, EX6000 before 1.0.0.30, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, R8300 before 1.0.2.94, R7300DST before 1.0.0.62, R7000P before 1.3.0.20, R6900P before 1.3.0.20, R6400 before 1.0.1.32, R6300v2 before 1.0.4.24, R8500 before 1.0.2.94, WNDR3400v3 before 1.0.1.18, and WN2500RPv2 before 1.0.1.52.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this NETGEAR reflected XSS vulnerability?
The vulnerability ID for this NETGEAR reflected XSS vulnerability is CVE-2019-20756.
Which NETGEAR devices are affected by this reflected XSS vulnerability?
The following NETGEAR devices are affected: EX7000 (before 1.0.0.64), EX6200 (before 1.0.3.86), EX6150 (before 1.0.0.38), EX6130 (before 1.0.0.22), EX6120 (before 1.0.0.40), EX6100 (before 1.0.2.22), EX6000 (before 1.0.0.30), EX3700 (before 1.0.0.70), EX3800 (before 1.0.0.70), R8300 (before 1.0.2.94), R7300dst (before 1.0.0.62), R7000p (before 1.3.0.20), R6900p (before 1.3.0.20), R6400 (before 1.0.1.32), R6300 (before 1.0.4.24), R8500 (before 1.0.2.94), Wndr3400 (before 1.0.1.18), Wn2500rp (before 1.0.1.52).
What is the severity of CVE-2019-20756?
The severity of CVE-2019-20756 is High, with a CVSS score of 6.1.
How can I fix the reflected XSS vulnerability on my affected NETGEAR device?
To fix the reflected XSS vulnerability, you should update your device's firmware to the latest available version.
Where can I find more information about the NETGEAR reflected XSS vulnerability?
You can find more information about the vulnerability in the NETGEAR Security Advisory (PSV-2017-0709) at the following link: [https://kb.netgear.com/000060643/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Routers-and-Extenders-PSV-2017-0709](https://kb.netgear.com/000060643/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-Some-Routers-and-Extenders-PSV-2017-0709)