Reflected XSS Vulnerability in NETGEAR Extenders
CVE-2017-18715

5.2MEDIUM

Key Information:

Vendor

Netgear
Status
Ex3700 Firmware
Vendor
CVE Published:
24 April 2020

What is CVE-2017-18715?

Certain NETGEAR extenders are susceptible to a reflected cross-site scripting (XSS) vulnerability. This flaw allows attackers to inject malicious scripts into the web interface of the affected devices, potentially compromising user sessions and exposing sensitive data. Ensure that your devices are updated to the latest firmware versions to mitigate this risk.

References

https://kb.netgear.com/000053133/Security-Advisory-for-Re...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.