TROYANOSYVIRUS
← Volver a CVEs

CVE-2019-20639

MEDIUM
4.8

Descripcion

Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.

Detalles CVE

Puntuacion CVSS v3.14.8
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosHIGH
Interaccion usuarioREQUIRED
Publicado4/15/2020
Ultima modificacion11/21/2024
Fuentenvd
Avistamientos honeypot0

Productos afectados

netgear:rbk50netgear:rbk50_firmwarenetgear:rbr50netgear:rbr50_firmwarenetgear:rbs50netgear:rbs50_firmware

Debilidades (CWE)

CWE-79

Referencias

https://kb.netgear.com/000061505/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-WiFi-Systems-PSV-2018-0543(cve@mitre.org)
https://kb.netgear.com/000061505/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-WiFi-Systems-PSV-2018-0543(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.