Stored XSS Vulnerability in NETGEAR ReadyNAS OS Devices
CVE-2017-18820
5.2MEDIUM
Summary
NETGEAR ReadyNAS OS 6 devices operating on versions before 6.8.0 are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This flaw allows attackers to inject malicious scripts that can be executed in the browser of users accessing compromised pages. By exploiting this vulnerability, threats may arise from user interaction with affected pages, leading to data theft, unauthorized actions, or further exploitation of internal resources. It is crucial for users to upgrade to the latest version to mitigate these risks.
References
CVSS V3.1
Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved