SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-20662

Certain NETGEAR devices are affected by stored XSS.

MEDIUM 4.3EPSS 0.30%

Does this matter?

Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.

Description

Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.

CVSS 3.1
4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.30% probability · 22th percentile
CISA KEV
Not listed
Weakness
CWE-79
Affected
netgear/rbr50 firmware · netgear/rbk50 firmware · netgear/rbs50 firmware
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.