CVE-2020-35836: XSS
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.2.56, XR700 before 1.0.1.10, and RAX120 before 1.0.0.78.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35836?
CVE-2020-35836 is a vulnerability in certain NETGEAR devices that allows for stored cross-site scripting (XSS) attacks.
Which devices are affected by CVE-2020-35836?
The following NETGEAR devices are affected by CVE-2020-35836: D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.2.56, XR700 before 1.0.1.10, and RAX120 before 1.0.0.78.
What is the severity of CVE-2020-35836?
CVE-2020-35836 has a severity rating of 4.8 (medium).
How does CVE-2020-35836 work?
CVE-2020-35836 allows an attacker to inject malicious scripts into a vulnerable NETGEAR device, which can then be executed in the browser of users accessing the device.
How can I fix CVE-2020-35836?
To fix CVE-2020-35836, you should update your NETGEAR devices to the latest firmware versions provided by the manufacturer.