Stored Cross-Site Scripting Vulnerability in NETGEAR WAC510 Devices
CVE-2019-20742

5.2MEDIUM

Key Information:

Vendor
Netgear
Status
Wac510 Firmware
Vendor
CVE Published:
16 April 2020

Summary

The NETGEAR WAC510 access points are susceptible to a stored cross-site scripting vulnerability. This flaw allows an attacker to inject malicious scripts into web pages viewed by users of affected devices, potentially leading to unauthorized actions or exposure of sensitive information. Users running versions before 8.0.1.3 should be alert to this issue and consider upgrading to mitigate risks.

References

https://kb.netgear.com/000060981/Security-Advisory-for-St...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.