Stored Cross-Site Scripting in NETGEAR Routers and Extenders

CVE-2021-45671

Summary

Certain NETGEAR devices are vulnerable to stored XSS attacks, allowing unauthorized users to inject malicious scripts into the device interface. This vulnerability can enable attackers to gain access to sensitive system information or hijack user sessions. Users are encouraged to update affected devices to the latest firmware version to mitigate this risk. For detailed information, refer to NETGEAR's official security advisory.

References