What is CVE-2019-20756?

CVE-2019-20756 is a medium-severity vulnerability in Netgear Ex3700, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-04-16.

How severe is CVE-2019-20756?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Netgear Ex3700

CVE-2019-20756

Certain NETGEAR devices are affected by reflected XSS. This affects EX7000 before 1.0.0.64, EX6200 before 1.0.3.86, EX6150 before 1.0.0.38, EX6130 before 1.0.0.22, EX6120 before 1.0.0.40, EX6100 before 1.0.2.22, EX6000 before 1.0.0.30, EX3…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.007 (49.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Netgear Ex3700
Netgear Ex3700_firmware
Netgear Ex3800
Netgear Ex3800_firmware
Netgear Ex6000
Netgear Ex6000_firmware
Netgear Ex6100
Netgear Ex6100_firmware
Netgear Ex6120
Netgear Ex6120_firmware

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-20756?: CVE-2019-20756 is a medium-severity vulnerability in Netgear Ex3700, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2020-04-16.
How severe is CVE-2019-20756?: Medium severity. CVSS v3 base score is 6.1 out of 10.