Stored Cross-Site Scripting Vulnerabilities in NETGEAR WiFi Systems

CVE-2019-20677

Summary

Certain NETGEAR WiFi devices are susceptible to stored cross-site scripting vulnerabilities, enabling attackers to inject malicious scripts into affected systems. This risk impacts models RBR50, RBS50, and RBK50, all of which have versions prior to 2.3.5.30. Exploitation of this vulnerability can lead to unauthorized access and execution of scripts within the context of user sessions, posing a significant threat to network security.

References