CVE-2020-11775 : What You Need to Know
Learn about CVE-2020-11775 affecting NETGEAR devices with stored XSS vulnerability. Find impacted systems and versions, mitigation steps, and security best practices.
Certain NETGEAR devices are affected by stored XSS vulnerability.
Understanding CVE-2020-11775
What is CVE-2020-11775?
Stored XSS vulnerability impacts various NETGEAR devices, potentially allowing attackers to execute malicious scripts.
The Impact of CVE-2020-11775
The vulnerability has a CVSS base score of 6 (Medium severity) with high confidentiality and integrity impact.
Technical Details of CVE-2020-11775
Vulnerability Description
- Stored XSS vulnerability affecting NETGEAR devices
Affected Systems and Versions
- D7800 before 1.0.1.56
- R7500v2 before 1.0.3.46
- R7800 before 1.0.2.68
- R8900 before 1.0.4.28
- R9000 before 1.0.4.28
- RAX120 before 1.0.0.78
- RBR20, RBS20, RBK20 before 2.3.5.26
- RBR40, RBS40, RBK40 before 2.3.5.30
- RBR50, RBS50, RBK50 before 2.3.5.30
- XR500 before 2.3.2.56
- XR700 before 1.0.1.10
Exploitation Mechanism
- Attack Complexity: Low
- Attack Vector: Local
- Privileges Required: High
- User Interaction: None
Mitigation and Prevention
Immediate Steps to Take
- Update affected devices to the latest firmware
- Monitor network traffic for any suspicious activity
Long-Term Security Practices
- Regularly update firmware and security patches
- Implement network segmentation and access controls
Patching and Updates
- Refer to NETGEAR's security advisory for specific patch details