What is CVE-2019-20674?

CVE-2019-20674 is a medium-severity vulnerability in NETGEAR Rbk20, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2020-04-15.

How severe is CVE-2019-20674?

Medium severity. CVSS v3 base score is 4.8 out of 10.

XSS in NETGEAR Rbk20

CVE-2019-20674

Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (36.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.

Affected products

Netgear Rbk20
Netgear Rbk20_firmware
Netgear Rbk40
Netgear Rbk40_firmware
Netgear Rbk50
Netgear Rbk50_firmware
Netgear Rbr20
Netgear Rbr20_firmware
Netgear Rbr40
Netgear Rbr40_firmware

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-20674?: CVE-2019-20674 is a medium-severity vulnerability in NETGEAR Rbk20, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2020-04-15.
How severe is CVE-2019-20674?: Medium severity. CVSS v3 base score is 4.8 out of 10.