Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-20756

No fix known EPSS <1%CVSS 7.1

Certain NETGEAR devices are affected by reflected XSS. This affects EX7000 before 1.0.0.64, EX6200 before 1.0.3.86, EX6150 before 1.0.0.38, EX6130 before 1.0.0.22, EX6120 before 1.0.0.40, EX6100 before 1.0.2.22, EX6000 before 1.0.0.30, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, R8300 before 1.0.2.94, R7300DST before 1.0.0.62, R7000P before 1.3.0.20, R6900P before 1.3.0.20, R6400 before 1.0.1.32, R6300v2 before 1.0.4.24, R8500 before 1.0.2.94, WNDR3400v3 before 1.0.1.18, and WN2500RPv2 before 1.0.1.52.

Published 2020-04-16 · CVE record · OSV

Products: netgear ex7000_firmware, netgear ex6200_firmware, netgear ex6150_firmware, netgear ex6130_firmware, netgear ex6120_firmware, netgear ex6100_firmware, netgear ex6000_firmware, netgear ex3700_firmware, netgear ex3800_firmware, netgear r8300_firmware, netgear r7300dst_firmware, netgear r7000p_firmware, netgear r6900p_firmware, netgear r6400_firmware, netgear r6300_firmware, netgear r8500_firmware, netgear wndr3400_firmware, netgear wn2500rp_firmware