Reflected XSS Vulnerability in NETGEAR Routers and Extenders

CVE-2019-20756

Summary

Certain NETGEAR routers and extenders are susceptible to a reflected XSS vulnerability, which could allow attackers to execute scripts in the context of a user’s session. This affects a range of devices, including models such as EX7000, R7000P, and WNDR3400v3, among others, specifically those running outdated firmware. When exploited, this vulnerability can enable malicious actors to manipulate user data or redirect users to harmful websites, posing a significant security risk for NETGEAR users. It's critical for users to update their device firmware to mitigate the risks associated with this vulnerability.

References