NetSight
medium6.1

CVE-2018-21155

Certain NETGEAR devices are affected by stored XSS.

Impact

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.52, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.4.2, R9000 before 1.0.3.16, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.

Affected products

VendorProductAffected versions
NetgearD7800 Firmware
before 1.0.1.34
NetgearDm200 Firmware
before 1.0.0.52
NetgearR6100 Firmware
before 1.0.1.22
NetgearR7500 Firmware
before 1.0.0.122
before 1.0.3.26
NetgearR7800 Firmware
before 1.0.2.42
NetgearR8900 Firmware
before 1.0.4.2
NetgearR9000 Firmware
before 1.0.3.16
NetgearWndr4300 Firmware
before 1.0.2.98
before 1.0.0.54
NetgearWndr4500 Firmware
before 1.0.0.54
NetgearWnr2000 Firmware
before 1.0.0.64

Weakness classification

References