Vulnerability Details CVE-2019-20756
Certain NETGEAR devices are affected by reflected XSS. This affects EX7000 before 1.0.0.64, EX6200 before 1.0.3.86, EX6150 before 1.0.0.38, EX6130 before 1.0.0.22, EX6120 before 1.0.0.40, EX6100 before 1.0.2.22, EX6000 before 1.0.0.30, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, R8300 before 1.0.2.94, R7300DST before 1.0.0.62, R7000P before 1.3.0.20, R6900P before 1.3.0.20, R6400 before 1.0.1.32, R6300v2 before 1.0.4.24, R8500 before 1.0.2.94, WNDR3400v3 before 1.0.1.18, and WN2500RPv2 before 1.0.1.52.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.0%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 4.3
Products affected by CVE-2019-20756
-
cpe:2.3:h:netgear:ex3700:-
-
cpe:2.3:h:netgear:ex3800:-
-
cpe:2.3:h:netgear:ex6000:-
-
cpe:2.3:h:netgear:ex6100:-
-
cpe:2.3:h:netgear:ex6120:-
-
cpe:2.3:h:netgear:ex6130:-
-
cpe:2.3:h:netgear:ex6150:-
-
cpe:2.3:h:netgear:ex6200:-
-
cpe:2.3:h:netgear:ex7000:-
-
cpe:2.3:h:netgear:r6300:v2
-
cpe:2.3:h:netgear:r6400:-
-
cpe:2.3:h:netgear:r6900p:-
-
cpe:2.3:h:netgear:r7000p:-
-
cpe:2.3:h:netgear:r7300dst:-
-
cpe:2.3:h:netgear:r8300:-
-
cpe:2.3:h:netgear:r8500:-
-
cpe:2.3:h:netgear:wn2500rp:v2
-
cpe:2.3:h:netgear:wndr3400:v3
-
cpe:2.3:o:netgear:ex3700_firmware:-
-
cpe:2.3:o:netgear:ex3700_firmware:1.0.0.64
-
cpe:2.3:o:netgear:ex3700_firmware:1.0.0.66
-
cpe:2.3:o:netgear:ex3800_firmware:-
-
cpe:2.3:o:netgear:ex3800_firmware:1.0.0.64
-
cpe:2.3:o:netgear:ex3800_firmware:1.0.0.66
-
cpe:2.3:o:netgear:ex6000_firmware:-
-
cpe:2.3:o:netgear:ex6000_firmware:1.0.0.24
-
cpe:2.3:o:netgear:ex6100_firmware:-
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.1.50
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.1.54
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.1.60
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.1.70
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.1.76
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.1.98
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.2.16_1.1.130
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.2.18
-
cpe:2.3:o:netgear:ex6100_firmware:1.0.2.20
-
cpe:2.3:o:netgear:ex6120_firmware:-
-
cpe:2.3:o:netgear:ex6120_firmware:1.0.0.32
-
cpe:2.3:o:netgear:ex6120_firmware:1.0.0.34
-
cpe:2.3:o:netgear:ex6130_firmware:-
-
cpe:2.3:o:netgear:ex6130_firmware:1.0.0.16
-
cpe:2.3:o:netgear:ex6150_firmware:-
-
cpe:2.3:o:netgear:ex6150_firmware:1.0.0.34_1.0.70
-
cpe:2.3:o:netgear:ex6150_firmware:1.0.0.36
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.44
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.50
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.52
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.56
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.62
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.64
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.72
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.74
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.78
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.82
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.1.90
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.3.82_1.1.117
-
cpe:2.3:o:netgear:ex6200_firmware:1.0.3.84
-
cpe:2.3:o:netgear:ex7000_firmware:-
-
cpe:2.3:o:netgear:ex7000_firmware:1.0.0.30_1.0.72
-
cpe:2.3:o:netgear:ex7000_firmware:1.0.0.32_1.0.84
-
cpe:2.3:o:netgear:ex7000_firmware:1.0.0.36_1.0.88
-
cpe:2.3:o:netgear:ex7000_firmware:1.0.0.38_1.091
-
cpe:2.3:o:netgear:ex7000_firmware:1.0.0.42_1.0.94
-
cpe:2.3:o:netgear:ex7000_firmware:1.0.0.50
-
cpe:2.3:o:netgear:ex7000_firmware:1.0.0.56
-
cpe:2.3:o:netgear:ex7000_firmware:1.0.0.60
-
cpe:2.3:o:netgear:r6300_firmware:-
-
cpe:2.3:o:netgear:r6300_firmware:1.0.0.36
-
cpe:2.3:o:netgear:r6300_firmware:1.0.2.78_1.0.58
-
cpe:2.3:o:netgear:r6300_firmware:1.0.4.06
-
cpe:2.3:o:netgear:r6300_firmware:1.0.4.12
-
cpe:2.3:o:netgear:r6300_firmware:1.0.4.18
-
cpe:2.3:o:netgear:r6300_firmware:1.0.4.22
-
cpe:2.3:o:netgear:r6300_firmware:1.0.4.6
-
cpe:2.3:o:netgear:r6300_firmware:1.0.4.8
-
cpe:2.3:o:netgear:r6300_firmware:1.0.4.8_10.0.77
-
cpe:2.3:o:netgear:r6400_firmware:-
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.12
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.14
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.18
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.20
-
cpe:2.3:o:netgear:r6400_firmware:1.0.1.24
-
cpe:2.3:o:netgear:r6900p_firmware:-
-
cpe:2.3:o:netgear:r6900p_firmware:1.0.0.56
-
cpe:2.3:o:netgear:r6900p_firmware:1.0.0.58
-
cpe:2.3:o:netgear:r6900p_firmware:1.0.0.62
-
cpe:2.3:o:netgear:r6900p_firmware:1.0.1.16
-
cpe:2.3:o:netgear:r6900p_firmware:1.2.0.22
-
cpe:2.3:o:netgear:r6900p_firmware:1.3.0.18
-
cpe:2.3:o:netgear:r6900p_firmware:1.3.0.8
-
cpe:2.3:o:netgear:r7000p_firmware:-
-
cpe:2.3:o:netgear:r7000p_firmware:1.0.0.56
-
cpe:2.3:o:netgear:r7000p_firmware:1.0.0.58
-
cpe:2.3:o:netgear:r7000p_firmware:1.0.0.62
-
cpe:2.3:o:netgear:r7000p_firmware:1.0.0.86
-
cpe:2.3:o:netgear:r7000p_firmware:1.0.1.16
-
cpe:2.3:o:netgear:r7000p_firmware:1.2.0.22
-
cpe:2.3:o:netgear:r7000p_firmware:1.3.0.18
-
cpe:2.3:o:netgear:r7000p_firmware:1.3.0.8
-
cpe:2.3:o:netgear:r7300dst_firmware:-
-
cpe:2.3:o:netgear:r7300dst_firmware:1.0.0.44
-
cpe:2.3:o:netgear:r7300dst_firmware:1.0.0.46
-
cpe:2.3:o:netgear:r7300dst_firmware:1.0.0.52
-
cpe:2.3:o:netgear:r7300dst_firmware:1.0.0.54
-
cpe:2.3:o:netgear:r7300dst_firmware:1.0.0.56
-
cpe:2.3:o:netgear:r7300dst_firmware:1.0.0.58
-
cpe:2.3:o:netgear:r8300_firmware:-
-
cpe:2.3:o:netgear:r8300_firmware:1.0.2.74
-
cpe:2.3:o:netgear:r8300_firmware:1.0.2.86
-
cpe:2.3:o:netgear:r8500_firmware:-
-
cpe:2.3:o:netgear:r8500_firmware:1.0.2.74
-
cpe:2.3:o:netgear:r8500_firmware:1.0.2.86
-
cpe:2.3:o:netgear:wn2500rp_firmware:1.0.0.54
-
cpe:2.3:o:netgear:wn2500rp_firmware:1.0.1.46
-
cpe:2.3:o:netgear:wndr3400_firmware:-
-
cpe:2.3:o:netgear:wndr3400_firmware:1.0.1.12
-
cpe:2.3:o:netgear:wndr3400_firmware:1.0.1.14
-
cpe:2.3:o:netgear:wndr3400_firmware:1.0.1.16
-
cpe:2.3:o:netgear:wndr3400_firmware:1.0.1.8