CVE-2020-35808: XSS
Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.63, DM200 before 1.0.0.61, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN3000RPv2 before 1.0.0.68, and WNR2000v5 before 1.0.0.66.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35808?
CVE-2020-35808 is a vulnerability that affects certain NETGEAR devices and allows for stored cross-site scripting (XSS).
Which NETGEAR devices are affected by CVE-2020-35808?
The NETGEAR devices affected by CVE-2020-35808 are D6100 before 1.0.0.63, DM200 before 1.0.0.61, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN3000RPv2 before 1.0.0.68, and WNR2000v5 before 1.0.0.66.
What is the severity rating of CVE-2020-35808?
The severity rating of CVE-2020-35808 is medium with a score of 4.8.
How can I fix the CVE-2020-35808 vulnerability?
To fix the CVE-2020-35808 vulnerability, you should update the firmware of the affected NETGEAR devices to the latest version provided by the manufacturer.
Where can I find more information about CVE-2020-35808?
You can find more information about CVE-2020-35808 on the NETGEAR knowledge base article: https://kb.netgear.com/000062708/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Range-Extenders-PSV-2018-0158