First published: Wed Apr 15 2020(Updated: )
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear D7800 Firmware | <1.0.1.56 | |
Netgear D7800 | ||
Netgear R7500 Firmware | <1.0.3.46 | |
Netgear R7500 | =v2 | |
NETGEAR R7800 firmware | <1.0.2.68 | |
NETGEAR R7800 | ||
Netgear R8900 Firmware | <1.0.4.28 | |
NETGEAR R8900 | ||
Netgear R9000 Firmware | <1.0.4.28 | |
NETGEAR R9000 | ||
Netgear Rax120 Firmware | <1.0.0.78 | |
Netgear Rax120 | ||
Netgear Xr500 Firmware | <2.3.2.56 | |
NETGEAR XR500 | ||
Netgear Xr700 Firmware | <1.0.1.10 | |
Netgear Xr700 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-11780.
This vulnerability affects certain NETGEAR devices including D7800, R7500v2, R7800, R8900, R9000, RAX120, XR500, and XR700.
CVE-2020-11780 has a severity level of 4.8 (medium).
To fix the CVE-2020-11780 vulnerability, you should update your NETGEAR device to the specified firmware versions mentioned in the advisory.
You can find more information about CVE-2020-11780 in the NETGEAR security advisory.