Stored XSS Vulnerability in NETGEAR ReadyNAS OS Devices
CVE-2017-18820

5.2MEDIUM

Key Information:

Vendor

Netgear
Status
Readynas Os
Vendor
CVE Published:
21 April 2020

What is CVE-2017-18820?

NETGEAR ReadyNAS OS 6 devices operating on versions before 6.8.0 are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This flaw allows attackers to inject malicious scripts that can be executed in the browser of users accessing compromised pages. By exploiting this vulnerability, threats may arise from user interaction with affected pages, leading to data theft, unauthorized actions, or further exploitation of internal resources. It is crucial for users to upgrade to the latest version to mitigate these risks.

References

https://kb.netgear.com/000049045/Security-Advisory-for-St...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.