CVE-2019-20486

No fix known EPSS <1%

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and adv_index.htm) within the web management console are vulnerable to stored XSS, as demonstrated by the configuration of the UI language.

Published 2020-03-02 · CVE record · OSV

Products: netgear wnr1000_firmware