What is CVE-2021-38534?

CVE-2021-38534 is a medium-severity vulnerability in Netgear D3600, classified under Cross-site Scripting. CVSS score: 4.1/10. Published 2021-08-11.

How severe is CVE-2021-38534?

Medium severity. CVSS v3 base score is 4.1 out of 10.

Is CVE-2021-38534 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Netgear D3600

CVE-2021-38534

Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 before 1.0.0.60, D6200 before 1.1.00.36, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.70, D7000v2 befo…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.005 (36.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.1 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

n0-traces/cve_

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-38534?: CVE-2021-38534 is a medium-severity vulnerability in Netgear D3600, classified under Cross-site Scripting. CVSS score: 4.1/10. Published 2021-08-11.
How severe is CVE-2021-38534?: Medium severity. CVSS v3 base score is 4.1 out of 10.
Is CVE-2021-38534 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.