CVE-2021-38538: XSS
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and XR500 before 2.3.2.56.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-38538?
CVE-2021-38538 is a vulnerability that affects certain NETGEAR devices and allows for stored cross-site scripting (XSS) attacks.
Which devices are affected by CVE-2021-38538?
CVE-2021-38538 affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56.
What is the severity of CVE-2021-38538?
CVE-2021-38538 has a severity rating of 6.1, which is considered medium.
How can I fix CVE-2021-38538?
To fix CVE-2021-38538, you should update your NETGEAR device's firmware to the latest version provided by the manufacturer.
Where can I find more information about CVE-2021-38538?
You can find more information about CVE-2021-38538 in the Netgear Security Advisory at the following link: [Netgear Security Advisory](https://kb.netgear.com/000063761/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0515)