Stored XSS Vulnerability in NETGEAR Routers and Orbi WiFi Systems
CVE-2020-35807

6MEDIUM

Key Information:

Vendor
Netgear
Status
D7800 Firmware
Vendor
CVE Published:
30 December 2020

Summary

NETGEAR devices, including various router models and Orbi WiFi systems, are impacted by a stored XSS vulnerability, allowing attackers to inject malicious scripts into the web interface. This potentially enables unauthorized access to sensitive user data and manipulation of account settings, posing significant security risks to affected users. The vulnerability is present in specific firmware versions across a number of devices, making it essential for users to update to the latest versions to mitigate the risk.

References

https://kb.netgear.com/000062730/Security-Advisory-for-St...
x_refsource_MISC

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.