CVE-2020-35840
Summary
| CVE | CVE-2020-35840 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-12-30 00:15:00 UTC |
| Updated | 2020-12-31 20:13:00 UTC |
| Description | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.76, WNR1000v4 before 1.1.0.62, WNR2020 before 1.1.0.62, and WNR2050 before 1.1.0.62. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | D6200 | - | All | All | All |
| Hardware | Netgear | D6200 | - | All | All | All |
| Operating System | Netgear | D6200 Firmware | All | All | All | All |
| Operating System | Netgear | D6200 Firmware | All | All | All | All |
| Hardware | Netgear | D7000 | - | All | All | All |
| Hardware | Netgear | D7000 | - | All | All | All |
| Operating System | Netgear | D7000 Firmware | All | All | All | All |
| Operating System | Netgear | D7000 Firmware | All | All | All | All |
| Hardware | Netgear | Jnr1010v2 | - | All | All | All |
| Hardware | Netgear | Jnr1010v2 | - | All | All | All |
| Operating System | Netgear | Jnr1010v2 Firmware | All | All | All | All |
| Operating System | Netgear | Jnr1010v2 Firmware | All | All | All | All |
| Hardware | Netgear | Jr6150 | - | All | All | All |
| Hardware | Netgear | Jr6150 | - | All | All | All |
| Operating System | Netgear | Jr6150 Firmware | All | All | All | All |
| Operating System | Netgear | Jr6150 Firmware | All | All | All | All |
| Hardware | Netgear | Jwnr2010v5 | - | All | All | All |
| Hardware | Netgear | Jwnr2010v5 | - | All | All | All |
| Operating System | Netgear | Jwnr2010v5 Firmware | All | All | All | All |
| Operating System | Netgear | Jwnr2010v5 Firmware | All | All | All | All |
| Hardware | Netgear | R6020 | - | All | All | All |
| Hardware | Netgear | R6020 | - | All | All | All |
| Operating System | Netgear | R6020 Firmware | All | All | All | All |
| Operating System | Netgear | R6020 Firmware | All | All | All | All |
| Hardware | Netgear | R6050 | - | All | All | All |
| Hardware | Netgear | R6050 | - | All | All | All |
| Operating System | Netgear | R6050 Firmware | All | All | All | All |
| Operating System | Netgear | R6050 Firmware | All | All | All | All |
| Hardware | Netgear | R6080 | - | All | All | All |
| Hardware | Netgear | R6080 | - | All | All | All |
| Operating System | Netgear | R6080 Firmware | All | All | All | All |
| Operating System | Netgear | R6080 Firmware | All | All | All | All |
| Hardware | Netgear | R6120 | - | All | All | All |
| Hardware | Netgear | R6120 | - | All | All | All |
| Operating System | Netgear | R6120 Firmware | All | All | All | All |
| Operating System | Netgear | R6120 Firmware | All | All | All | All |
| Hardware | Netgear | R6220 | - | All | All | All |
| Hardware | Netgear | R6220 | - | All | All | All |
| Operating System | Netgear | R6220 Firmware | All | All | All | All |
| Operating System | Netgear | R6220 Firmware | All | All | All | All |
| Hardware | Netgear | R6260 | - | All | All | All |
| Hardware | Netgear | R6260 | - | All | All | All |
| Operating System | Netgear | R6260 Firmware | All | All | All | All |
| Operating System | Netgear | R6260 Firmware | All | All | All | All |
| Hardware | Netgear | Wnr1000v4 | - | All | All | All |
| Hardware | Netgear | Wnr1000v4 | - | All | All | All |
| Operating System | Netgear | Wnr1000v4 Firmware | All | All | All | All |
| Operating System | Netgear | Wnr1000v4 Firmware | All | All | All | All |
| Hardware | Netgear | Wnr2020 | - | All | All | All |
| Hardware | Netgear | Wnr2020 | - | All | All | All |
| Operating System | Netgear | Wnr2020 Firmware | All | All | All | All |
| Operating System | Netgear | Wnr2020 Firmware | All | All | All | All |
| Hardware | Netgear | Wnr2050 | - | All | All | All |
| Hardware | Netgear | Wnr2050 | - | All | All | All |
| Operating System | Netgear | Wnr2050 Firmware | All | All | All | All |
| Operating System | Netgear | Wnr2050 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for Stored Cross Site Scripting on Some Routers, PSV-2019-0010 | Answer | NETGEAR Support | MISC | kb.netgear.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.