CVE-2020-35808: XSS
First published: Tue Dec 29 2020(Updated: )
Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.63, DM200 before 1.0.0.61, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN3000RPv2 before 1.0.0.68, and WNR2000v5 before 1.0.0.66.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear D6100 Firmware | <1.0.0.63 | |
| NETGEAR D6100 | ||
| Netgear Dm200 Firmware | <1.0.0.61 | |
| Netgear Dm200 | ||
| NETGEAR R7800 firmware | <1.0.2.52 | |
| NETGEAR R7800 | ||
| Netgear R8900 Firmware | <1.0.4.12 | |
| NETGEAR R8900 | ||
| Netgear R9000 Firmware | <1.0.4.12 | |
| NETGEAR R9000 | ||
| Netgear Wn3000rpv2 Firmware | <1.0.0.68 | |
| Netgear Wn3000rpv2 | ||
| Netgear Wnr2000v5 Firmware | <1.0.0.66 | |
| NETGEAR WNR2000v5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-35808?
CVE-2020-35808 is a vulnerability that affects certain NETGEAR devices and allows for stored cross-site scripting (XSS).
Which NETGEAR devices are affected by CVE-2020-35808?
The NETGEAR devices affected by CVE-2020-35808 are D6100 before 1.0.0.63, DM200 before 1.0.0.61, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN3000RPv2 before 1.0.0.68, and WNR2000v5 before 1.0.0.66.
What is the severity rating of CVE-2020-35808?
The severity rating of CVE-2020-35808 is medium with a score of 4.8.
How can I fix the CVE-2020-35808 vulnerability?
To fix the CVE-2020-35808 vulnerability, you should update the firmware of the affected NETGEAR devices to the latest version provided by the manufacturer.
Where can I find more information about CVE-2020-35808?
You can find more information about CVE-2020-35808 on the NETGEAR knowledge base article: https://kb.netgear.com/000062708/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Range-Extenders-PSV-2018-0158
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- vendor/netgear
- canonical/netgear d6100 firmware
- canonical/netgear d6100
- canonical/netgear dm200 firmware
- canonical/netgear dm200
- canonical/netgear r7800 firmware
- canonical/netgear r7800
- canonical/netgear r8900 firmware
- canonical/netgear r8900
- canonical/netgear r9000 firmware
- canonical/netgear r9000
- canonical/netgear wn3000rpv2 firmware
- canonical/netgear wn3000rpv2
- canonical/netgear wnr2000v5 firmware
- canonical/netgear wnr2000v5