Stored Cross-Site Scripting Vulnerability in NETGEAR WiFi Systems

CVE-2019-20661

Summary

Certain NETGEAR WiFi systems, including models RBR50, RBS50, and RBK50, are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This issue enables attackers to inject malicious scripts, which could be executed when unsuspecting users access compromised sections of the device interface. The vulnerability impacts devices running versions prior to 2.3.5.30, highlighting the need for users to apply the latest firmware updates to mitigate this risk. For further details and mitigation actions, refer to NETGEAR's official security advisory.

References