First published: Tue Dec 29 2020(Updated: )
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear D7800 Firmware | <1.0.1.56 | |
Netgear D7800 | ||
Netgear R7500v2 Firmware | <1.0.3.46 | |
Netgear R7500v2 | ||
NETGEAR R7800 firmware | <1.0.2.74 | |
NETGEAR R7800 | ||
Netgear R8900 Firmware | <1.0.4.28 | |
NETGEAR R8900 | ||
Netgear R9000 Firmware | <1.0.4.28 | |
NETGEAR R9000 | ||
Netgear Rax120 Firmware | <1.0.0.78 | |
Netgear Rax120 | ||
Netgear Xr500 Firmware | <2.3.2.56 | |
NETGEAR XR500 | ||
Netgear Xr700 Firmware | <1.0.1.10 | |
Netgear Xr700 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability affects NETGEAR devices D7800, R7500v2, R7800, R8900, R9000, RAX120, XR500, and XR700.
The severity of CVE-2020-35837 is medium, with a severity value of 4.8.
To fix the vulnerability, update the firmware of the affected NETGEAR devices to the specified versions.
You can find more information about the vulnerability in the NETGEAR security advisory linked in the references.