CVE-2020-11786: XSS
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11786?
CVE-2020-11786 is classified as a stored XSS vulnerability, which can allow an attacker to execute malicious scripts in the context of the user’s session.
How do I fix CVE-2020-11786?
To mitigate CVE-2020-11786, upgrade to the latest firmware version provided by NETGEAR for the affected devices.
Which NETGEAR devices are affected by CVE-2020-11786?
Affected NETGEAR devices include D7800, R7500v2, R7800, R8900, R9000, RAX120, RBR50, RBS50, RBK50, and XR500, among others.
What is stored XSS in the context of CVE-2020-11786?
Stored XSS in CVE-2020-11786 refers to a vulnerability where malicious scripts are injected and stored on the server, which are then served to users visiting the affected pages.
What versions of NETGEAR firmware are vulnerable to CVE-2020-11786?
Firmware versions prior to 1.0.1.56 for D7800, 1.0.3.46 for R7500v2, 1.0.2.68 for R7800, and other specific versions for various NETGEAR devices are vulnerable.