CVE-2020-11786
Published Apr 15, 2020
Last updated 5 years ago
Overview
- Description
- Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 4.8
- Impact score
- 2.7
- Exploitability score
- 1.7
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 3.0
- Type
- Secondary
- Base score
- 6
- Impact score
- 5.2
- Exploitability score
- 0.8
- Vector string
- CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 3.5
- Impact score
- 2.9
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C35893A-C6C2-45C7-B3AF-BCFA62381BE5",
"versionEndExcluding": "1.0.1.56"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DA2D4987-3726-4A72-8D32-592F59FAC46D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7647BDE6-1000-4574-A7C1-C6AD1DB98FBF",
"versionEndExcluding": "1.0.3.46"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7500:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2E0DFBF4-E393-44AE-AEF9-1B2059EE5AE8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70E4DC5E-E34E-4AB1-BD50-F741142CB917",
"versionEndExcluding": "1.0.2.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17CF7445-6950-45FE-9D1A-E23F63316329"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3439B210-8122-4E1E-84B2-8751F3EE6AE5",
"versionEndExcluding": "1.0.4.28"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0F859165-8D89-4CDD-9D48-9C7923D2261F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E06F9DB2-4540-4F88-94E7-4331D158899B",
"versionEndExcluding": "1.0.4.28"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF94E4E9-5F05-4727-BEEC-E6CAEF313864",
"versionEndExcluding": "1.0.0.78"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1742BD56-84E4-40E1-8C04-098B3715161E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA9B22EF-5791-41DB-8CC1-A1B60CF4A73F",
"versionEndExcluding": "2.3.2.56"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C71A8281-DEBC-4904-9625-980F78397DF7",
"versionEndExcluding": "1.0.1.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:xr700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E12892C8-5E01-49A6-BF47-09D630377093"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "094B04D5-9063-4D7A-B367-E1F2688B3667",
"versionEndExcluding": "2.3.5.30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B2CAEA32-6934-4743-9E6B-22D52AC5E7F8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C489444C-6C19-4A52-AF66-A1D48ADC4F26",
"versionEndExcluding": "2.3.5.30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3BCFD959-D522-4FA0-AD01-2937DAEE1EDF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7ED1541-DE7D-4A4C-B8D1-CB42E52E3DBE",
"versionEndExcluding": "2.3.5.30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rbk50:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8BA66D07-D017-49D6-8E72-5C48E940DE1B"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]