First published: Tue Dec 29 2020(Updated: )
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear D7800 Firmware | <1.0.1.56 | |
Netgear D7800 | ||
Netgear R7500v2 Firmware | <1.0.3.46 | |
Netgear R7500v2 | ||
NETGEAR R7800 firmware | <1.0.2.68 | |
NETGEAR R7800 | ||
Netgear R8900 Firmware | <1.0.4.28 | |
NETGEAR R8900 | ||
Netgear R9000 Firmware | <1.0.4.28 | |
NETGEAR R9000 | ||
Netgear Rax120 Firmware | <1.0.0.78 | |
Netgear Rax120 | ||
Netgear Xr500 Firmware | <2.3.2.56 | |
NETGEAR XR500 | ||
Netgear Xr700 Firmware | <1.0.1.10 | |
Netgear Xr700 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-35834 is medium, with a severity value of 4.8.
Certain NETGEAR devices including D7800, R7500v2, R7800, R8900, R9000, RAX120, XR500, and XR700 are affected by CVE-2020-35834.
The vulnerability type of CVE-2020-35834 is stored XSS (Cross-Site Scripting).
To fix CVE-2020-35834, update the firmware of affected NETGEAR devices to the specified versions.
You can find more information about CVE-2020-35834 in the Netgear security advisory.