ID
VAR-202108-1662
CVE
CVE-2021-38535
TITLE
plural NETGEAR Cross-site scripting vulnerabilities in devices
Trust: 0.8
DESCRIPTION
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.78, R7200 before 1.2.0.76, R7350 before 1.2.0.76, R7400 before 1.2.0.76, R7450 before 1.2.0.76, AC2100 before 1.2.0.76, AC2400 before 1.2.0.76, AC2600 before 1.2.0.76, RAX35 before 1.0.3.62, and RAX40 before 1.0.3.62. plural NETGEAR A cross-site scripting vulnerability exists in the device.Information may be obtained and information may be tampered with. This affects D6200 prior to 1.1.00.40, D7000 prior to 1.0.1.78, R6020 prior to 1.0.0.48, R6080 prior to 1.0.0.48, R6120 prior to 1.0.0.76, R6260 prior to 1.1.0.78, R6700v2 prior to 1.2.0.76, R6800 prior to 1.2.0.76, R6900v2 prior to 1.2.0.76, R6850 prior to 1.1.0.78, R7200 prior to 1.2.0.76, R7350 prior to 1.2.0.76, R7400 prior to 1.2.0.76, R7450 prior to 1.2.0.76, AC2100 prior to 1.2.0.76, AC2400 prior to 1.2.0.76, AC2600 prior to 1.2.0.76, RAX35 prior to 1.0.3.62, and RAX40 prior to 1.0.3.62
Trust: 1.71
AFFECTED PRODUCTS
| vendor: | netgear | model: | r7200 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | ac2100 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6900 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | d7000 | scope: | lt | version: | 1.0.1.78 | Trust: 1.0 |
| vendor: | netgear | model: | rax40 | scope: | lt | version: | 1.0.3.62 | Trust: 1.0 |
| vendor: | netgear | model: | r7400 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r7350 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6020 | scope: | lt | version: | 1.0.0.48 | Trust: 1.0 |
| vendor: | netgear | model: | r6260 | scope: | lt | version: | 1.1.0.78 | Trust: 1.0 |
| vendor: | netgear | model: | r6800 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6850 | scope: | lt | version: | 1.1.0.78 | Trust: 1.0 |
| vendor: | netgear | model: | r6120 | scope: | lt | version: | 1.0.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r7450 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | d6200 | scope: | lt | version: | 1.1.00.40 | Trust: 1.0 |
| vendor: | netgear | model: | ac2600 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6700 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | ac2400 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | rax35 | scope: | lt | version: | 1.0.3.62 | Trust: 1.0 |
| vendor: | netgear | model: | r6080 | scope: | lt | version: | 1.0.0.48 | Trust: 1.0 |
| vendor: | ネットギア | model: | d7000 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6020 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6850 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6700 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6080 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6800 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6120 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6900 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6260 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | d6200 | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-79 | Trust: 1.0 |
| problemtype: | Cross-site scripting (CWE-79) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
XSS
Trust: 0.6
PATCH
| title: | Security Advisory for Stored Cross Site Scripting on Some Routers and Gateways, PSV-2019-0192 | url: | https://kb.netgear.com/000063773/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2019-0192 | Trust: 0.8 |
| title: | Netgear NETGEAR Fixes for cross-site scripting vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=159338 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-38535 | Trust: 3.3 |
| db: | JVNDB | id: | JVNDB-2021-010451 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202108-944 | Trust: 0.6 |
| db: | VULMON | id: | CVE-2021-38535 | Trust: 0.1 |
REFERENCES
| url: | https://kb.netgear.com/000063773/security-advisory-for-stored-cross-site-scripting-on-some-routers-and-gateways-psv-2019-0192 | Trust: 1.7 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-38535 | Trust: 1.4 |
| url: | https://cwe.mitre.org/data/definitions/79.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | VULMON | id: | CVE-2021-38535 |
| db: | JVNDB | id: | JVNDB-2021-010451 |
| db: | CNNVD | id: | CNNVD-202108-944 |
| db: | NVD | id: | CVE-2021-38535 |
LAST UPDATE DATE
2024-08-14T15:17:07.779000+00:00
SOURCES UPDATE DATE
| db: | VULMON | id: | CVE-2021-38535 | date: | 2021-08-19T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-010451 | date: | 2022-07-01T06:13:00 |
| db: | CNNVD | id: | CNNVD-202108-944 | date: | 2021-08-26T00:00:00 |
| db: | NVD | id: | CVE-2021-38535 | date: | 2021-08-19T16:42:59.740 |
SOURCES RELEASE DATE
| db: | VULMON | id: | CVE-2021-38535 | date: | 2021-08-11T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-010451 | date: | 2022-07-01T00:00:00 |
| db: | CNNVD | id: | CNNVD-202108-944 | date: | 2021-08-10T00:00:00 |
| db: | NVD | id: | CVE-2021-38535 | date: | 2021-08-11T00:17:26.993 |