CVE-2019-20746

Certain NETGEAR devices are affected by reflected XSS

Medium · published April 16, 2020

CVSS v3.0
4.3
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.8, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, WN3000RPv2 before 1.0.0.68, WN3000RPv3 before 1.0.2.70, WN3100RPv2 before 1.0.0.60, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, and WNR2000v5 before 1.0.0.68.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:H/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00626 · 49.3th percentile
Published
2020-04-16T20:57Z
EPSS history
Timeline
  • 16 APR 20:57Z
    Certain NETGEAR devices are affected by reflected XSS
    cvelistv5