CVE-2021-38535: XSS
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.78, R7200 before 1.2.0.76, R7350 before 1.2.0.76, R7400 before 1.2.0.76, R7450 before 1.2.0.76, AC2100 before 1.2.0.76, AC2400 before 1.2.0.76, AC2600 before 1.2.0.76, RAX35 before 1.0.3.62, and RAX40 before 1.0.3.62.
Affected Software
Event History
Frequently Asked Questions
Which NETGEAR devices are affected by stored XSS vulnerability CVE-2021-38535?
The NETGEAR devices affected by the stored XSS vulnerability CVE-2021-38535 are D6200, D7000, R6020, R6080, R6120, R6260, R6700v2, R6800, R6900v2, R6850, R7200, R7350, R7400, R7450, Ac2100, Ac2400, Ac2600, Rax35, and Rax40.
What is the severity level of vulnerability CVE-2021-38535?
The severity level of vulnerability CVE-2021-38535 is medium (4.8).
How can I fix the stored XSS vulnerability CVE-2021-38535?
To fix the stored XSS vulnerability CVE-2021-38535, update the firmware of the affected NETGEAR devices to versions 1.1.00.40 (D6200), 1.0.1.78 (D7000), 1.0.0.48 (R6020, R6080), 1.0.0.76 (R6120, R6260, R6700v2, R6800, R6900v2, R6850), 1.2.0.76 (R7200, R7350, R7400, R7450, Ac2100, Ac2400, Ac2600), or 1.0.3.62 (Rax35, Rax40).
What is the Common Weakness Enumeration (CWE) ID associated with vulnerability CVE-2021-38535?
The Common Weakness Enumeration (CWE) ID associated with vulnerability CVE-2021-38535 is CWE-79.
Where can I find more information about the stored XSS vulnerability CVE-2021-38535?
You can find more information about the stored XSS vulnerability CVE-2021-38535 in the Netgear Security Advisory PSV-2019-0192.