medium6.1
CVE-2019-20486
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices.
Impact
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and adv_index.htm) within the web management console are vulnerable to stored XSS, as demonstrated by the configuration of the UI language.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Wnr1000 Firmware | Version 1.1.0.54 |