CVE-2018-21095

Medium

Description

Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210.

SeverityMedium
CVSS4.3
Exploit probability—
ProductNetgear Srr60 Firmware
PublishedApr 27, 2020
First seenApr 27, 2020

How to fix

Update
  • netgear srr60_firmware2.2.1.210 or later
  • netgear srs60_firmware2.2.1.210 or later

Affected products

ProductAffected versionsFixed in
netgear srr60_firmwarev < 2.2.1.2102.2.1.210
netgear srs60_firmwarev < 2.2.1.2102.2.1.210

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2018-21095 · Netgear Srr60 Firmware · Dark Radar