CVE-2021-38537: XSS
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.78, R7200 before 1.2.0.76, R7350 before 1.2.0.76, R7400 before 1.2.0.76, R7450 before 1.2.0.76, AC2100 before 1.2.0.76, AC2400 before 1.2.0.76, AC2600 before 1.2.0.76, and RAX40 before 1.0.3.62.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-38537.
Which NETGEAR devices are affected by this vulnerability?
This vulnerability affects certain NETGEAR devices including D6200, D7000, R6020, R6080, R6120, R6260, R6700v2, R6800, R6900v2, and R6850.
What is the severity of CVE-2021-38537?
The severity of CVE-2021-38537 is medium with a CVSS score of 4.8.
How can I fix the vulnerability in my affected NETGEAR device?
To fix the vulnerability, it is recommended to update the firmware of your affected NETGEAR device to the latest version provided by NETGEAR.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the NETGEAR Security Advisory at the following link: https://kb.netgear.com/000063775/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2019-0245.