Vulnerability Details CVE-2019-20746
Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.8, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, WN3000RPv2 before 1.0.0.68, WN3000RPv3 before 1.0.2.70, WN3100RPv2 before 1.0.0.60, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, and WNR2000v5 before 1.0.0.68.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.4%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 3.5
Products affected by CVE-2019-20746
-
cpe:2.3:h:netgear:d3600:-
-
cpe:2.3:h:netgear:d6000:-
-
cpe:2.3:h:netgear:d7800:-
-
cpe:2.3:h:netgear:dm200:-
-
cpe:2.3:h:netgear:r7800:-
-
cpe:2.3:h:netgear:r8900:-
-
cpe:2.3:h:netgear:r9000:-
-
cpe:2.3:h:netgear:rbk20:-
-
cpe:2.3:h:netgear:rbk40:-
-
cpe:2.3:h:netgear:rbk50:-
-
cpe:2.3:h:netgear:rbr20:-
-
cpe:2.3:h:netgear:rbr50:-
-
cpe:2.3:h:netgear:rbs20:-
-
cpe:2.3:h:netgear:rbs40:-
-
cpe:2.3:h:netgear:rbs50:-
-
cpe:2.3:h:netgear:wn3000rp:v2
-
cpe:2.3:h:netgear:wn3000rp:v3
-
cpe:2.3:h:netgear:wn3100rp:v2
-
cpe:2.3:h:netgear:wndr4300:v2
-
cpe:2.3:h:netgear:wndr4500:v3
-
cpe:2.3:h:netgear:wnr2000:v5
-
cpe:2.3:o:netgear:d3600_firmware:-
-
cpe:2.3:o:netgear:d3600_firmware:1.0.0.49
-
cpe:2.3:o:netgear:d3600_firmware:1.0.0.61
-
cpe:2.3:o:netgear:d3600_firmware:1.0.0.67
-
cpe:2.3:o:netgear:d3600_firmware:1.0.0.68
-
cpe:2.3:o:netgear:d3600_firmware:1.0.0.72
-
cpe:2.3:o:netgear:d3600_firmware:_1.0.0.49
-
cpe:2.3:o:netgear:d6000_firmware:-
-
cpe:2.3:o:netgear:d6000_firmware:1.0.0.49
-
cpe:2.3:o:netgear:d6000_firmware:1.0.0.61
-
cpe:2.3:o:netgear:d6000_firmware:1.0.0.67
-
cpe:2.3:o:netgear:d6000_firmware:1.0.0.68
-
cpe:2.3:o:netgear:d6000_firmware:1.0.0.72
-
cpe:2.3:o:netgear:d7800_firmware:-
-
cpe:2.3:o:netgear:d7800_firmware:1.0.1.22
-
cpe:2.3:o:netgear:d7800_firmware:1.0.1.24
-
cpe:2.3:o:netgear:d7800_firmware:1.0.1.28
-
cpe:2.3:o:netgear:d7800_firmware:1.0.1.30
-
cpe:2.3:o:netgear:d7800_firmware:1.0.1.31
-
cpe:2.3:o:netgear:d7800_firmware:1.0.1.34
-
cpe:2.3:o:netgear:d7800_firmware:1.0.1.40
-
cpe:2.3:o:netgear:d7800_firmware:1.0.1.42
-
cpe:2.3:o:netgear:dm200_firmware:1.0.0.50
-
cpe:2.3:o:netgear:dm200_firmware:1.0.0.52
-
cpe:2.3:o:netgear:r7800_firmware:-
-
cpe:2.3:o:netgear:r7800_firmware:1.0.1.30
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.16
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.28
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.30
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.32
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.36
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.38
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.40
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.42
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.44
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.46
-
cpe:2.3:o:netgear:r7800_firmware:1.0.2.52
-
cpe:2.3:o:netgear:r8900_firmware:-
-
cpe:2.3:o:netgear:r8900_firmware:1.0.2.60
-
cpe:2.3:o:netgear:r8900_firmware:1.0.3.10
-
cpe:2.3:o:netgear:r8900_firmware:1.0.3.6
-
cpe:2.3:o:netgear:r8900_firmware:1.0.4.2
-
cpe:2.3:o:netgear:r9000_firmware:-
-
cpe:2.3:o:netgear:r9000_firmware:1.0.2.30
-
cpe:2.3:o:netgear:r9000_firmware:1.0.2.4
-
cpe:2.3:o:netgear:r9000_firmware:1.0.2.40
-
cpe:2.3:o:netgear:r9000_firmware:1.0.2.52
-
cpe:2.3:o:netgear:r9000_firmware:1.0.3.10
-
cpe:2.3:o:netgear:r9000_firmware:1.0.3.16
-
cpe:2.3:o:netgear:r9000_firmware:1.0.3.6
-
cpe:2.3:o:netgear:r9000_firmware:1.0.4.2
-
cpe:2.3:o:netgear:rbk20_firmware:-
-
cpe:2.3:o:netgear:rbk20_firmware:2.3.0.22
-
cpe:2.3:o:netgear:rbk40_firmware:-
-
cpe:2.3:o:netgear:rbk40_firmware:2.1.4.10
-
cpe:2.3:o:netgear:rbk40_firmware:2.3.0.22
-
cpe:2.3:o:netgear:rbk50_firmware:-
-
cpe:2.3:o:netgear:rbk50_firmware:2.1.4.10
-
cpe:2.3:o:netgear:rbk50_firmware:2.3.0.22
-
cpe:2.3:o:netgear:rbr20_firmware:-
-
cpe:2.3:o:netgear:rbr20_firmware:2.3.0.22
-
cpe:2.3:o:netgear:rbr50_firmware:-
-
cpe:2.3:o:netgear:rbr50_firmware:2.3.0.22
-
cpe:2.3:o:netgear:rbs20_firmware:-
-
cpe:2.3:o:netgear:rbs20_firmware:2.3.0.22
-
cpe:2.3:o:netgear:rbs40_firmware:-
-
cpe:2.3:o:netgear:rbs40_firmware:2.1.4.10
-
cpe:2.3:o:netgear:rbs40_firmware:2.3.0.22
-
cpe:2.3:o:netgear:rbs50_firmware:-
-
cpe:2.3:o:netgear:rbs50_firmware:2.1.4.10
-
cpe:2.3:o:netgear:rbs50_firmware:2.3.0.22
-
cpe:2.3:o:netgear:wn3000rp_firmware:1.0.0.52
-
cpe:2.3:o:netgear:wn3000rp_firmware:1.0.0.56
-
cpe:2.3:o:netgear:wn3000rp_firmware:1.0.0.68
-
cpe:2.3:o:netgear:wn3000rp_firmware:1.0.2.44
-
cpe:2.3:o:netgear:wn3000rp_firmware:1.0.2.50
-
cpe:2.3:o:netgear:wn3000rp_firmware:1.0.2.52
-
cpe:2.3:o:netgear:wn3000rp_firmware:1.0.2.66
-
cpe:2.3:o:netgear:wn3100rp_firmware:1.0.0.20
-
cpe:2.3:o:netgear:wn3100rp_firmware:1.0.0.40
-
cpe:2.3:o:netgear:wn3100rp_firmware:1.0.0.42
-
cpe:2.3:o:netgear:wn3100rp_firmware:1.0.0.56
-
cpe:2.3:o:netgear:wndr4300_firmware:-
-
cpe:2.3:o:netgear:wndr4300_firmware:1.0.0.48
-
cpe:2.3:o:netgear:wndr4300_firmware:1.0.0.50
-
cpe:2.3:o:netgear:wndr4300_firmware:1.0.0.52
-
cpe:2.3:o:netgear:wndr4300_firmware:1.0.0.54
-
cpe:2.3:o:netgear:wndr4300_firmware:1.0.0.56
-
cpe:2.3:o:netgear:wndr4500_firmware:-
-
cpe:2.3:o:netgear:wndr4500_firmware:1.0.0.48
-
cpe:2.3:o:netgear:wndr4500_firmware:1.0.0.50
-
cpe:2.3:o:netgear:wndr4500_firmware:1.0.0.52
-
cpe:2.3:o:netgear:wndr4500_firmware:1.0.0.54
-
cpe:2.3:o:netgear:wndr4500_firmware:1.0.0.56
-
cpe:2.3:o:netgear:wnr2000_firmware:1.0.0.42
-
cpe:2.3:o:netgear:wnr2000_firmware:1.0.0.48
-
cpe:2.3:o:netgear:wnr2000_firmware:1.0.0.58
-
cpe:2.3:o:netgear:wnr2000_firmware:1.0.0.62
-
cpe:2.3:o:netgear:wnr2000_firmware:1.0.0.64
-
cpe:2.3:o:netgear:wnr2000_firmware:1.0.0.66