Stored Cross-Site Scripting in NETGEAR WiFi Devices

CVE-2019-20670

Summary

Certain NETGEAR WiFi devices, including the RBR50, RBS50, and RBK50 models, are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This security flaw allows an attacker to inject malicious scripts into the device's interface, which can compromise user interactions and data integrity when accessed. Users of devices running firmware versions before 2.3.5.30 are particularly at risk, as this vulnerability has been documented in security advisories. Immediate action should be taken to prevent potential exploitation.

References