CVE-2019-20752

Certain NETGEAR devices are affected by stored XSS

Medium · published April 16, 2020

CVSS v3.0
4.8
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, WN3000RPv2 before 1.0.0.68, WN3000RPv3 before 1.0.2.70, WN3100RPv2 before 1.0.0.60, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, and WNR2000v5 before 1.0.0.68.

The record
Technical detail
CVSS v3.0
4.8 · MEDIUM
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00626 · 49.3th percentile
Published
2020-04-16T21:04Z
EPSS history
Timeline
  • 16 APR 21:04Z
    Certain NETGEAR devices are affected by stored XSS
    cvelistv5