CVE-2020-35813: XSS
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, XR700 before 1.0.1.10, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.2.56, and RAX120 before 1.0.0.78.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35813?
CVE-2020-35813 is a vulnerability that affects certain NETGEAR devices and allows for stored XSS attacks.
Which NETGEAR devices are affected by CVE-2020-35813?
The following NETGEAR devices are affected by CVE-2020-35813: D7800, RBK50, RBR50, RBS50, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, XR700.
What is the severity of CVE-2020-35813?
CVE-2020-35813 has a severity rating of 4.8 (medium).
How do I fix the CVE-2020-35813 vulnerability?
To fix the CVE-2020-35813 vulnerability, update your NETGEAR device firmware to the recommended version provided by NETGEAR.
Where can I find more information about CVE-2020-35813?
You can find more information about CVE-2020-35813 on the NETGEAR security advisory page: [Link](https://kb.netgear.com/000062640/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-WiFi-Systems-PSV-2018-0486).