CVE-2019-20759 — Cross-site Scripting in Netgear R9000 Firmware

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
5.2MEDIUMNVD
EPSS
0.2%
top 60.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netgear R9000 Firmware
Timeline
PublishedApr 16
Latest updateMay 24

Description

NETGEAR R9000 devices before 1.0.4.26 are affected by stored XSS.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.1 | Impact: 2.7

Affected Packages1 packages

▶NVDnetgear/r9000_firmware< 1.0.4.26

🔴Vulnerability Details

2
GHSA
GHSA-w79x-7x76-qxrp: NETGEAR R9000 devices before 1↗2022-05-24
▶
CVEList
CVE-2019-20759: NETGEAR R9000 devices before 1↗2020-04-16
▶
CVE-2019-20759 — Cross-site Scripting in Netgear | cvebase