CVE-2020-35807: XSS
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and WN3000RPv2 before 1.0.0.78.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this NETGEAR vulnerability?
The vulnerability ID is CVE-2020-35807.
Which NETGEAR devices are affected by this vulnerability?
The following NETGEAR devices are affected: D7800 before 1.0.1.56, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and Wn3000rpv2 before 1.0.0.78.
What is the severity rating of this vulnerability?
The severity rating of CVE-2020-35807 is 4.8 (Medium).
What is the Common Weakness Enumeration (CWE) ID related to this vulnerability?
The CWE ID related to CVE-2020-35807 is CWE-79 (Improper Neutralization of Input During Web Page Generation).
How can I fix this vulnerability on my NETGEAR device?
To fix this vulnerability, you should update the firmware of your NETGEAR device to the recommended version mentioned in the security advisory provided by NETGEAR.