Stored Cross-Site Scripting Vulnerability in NETGEAR WiFi Devices

CVE-2019-20663

Summary

Certain NETGEAR WiFi devices are susceptible to stored Cross-Site Scripting attacks. This vulnerability affects specific models, such as RBR50, RBS50, and RBK50, all prior to version 2.3.5.30. Attackers can exploit this flaw to inject malicious scripts that are permanently stored on the targeted devices, potentially leading to unauthorized access, data leakage, or other malicious actions.

References