mickmick.net

Netgear Products Multiple Vulnerabilities

Release Date: 15 Jul 2024

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities were identified in Netgear Products. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting and security restriction bypass on the targeted system.

 

---

Impact

• Cross-Site Scripting
• Security Restriction Bypass

---

System / Technologies affected

• NETGEAR XR1000 version prior to 1.0.0.72
• NETGEAR CAX30 version prior to 2.2.2.2

 

---

Solutions

Before installation of the software, please visit the vendor's web-site for more details.

 

• Apply fixes issued by the vendor:
  • https://kb.netgear.com/000066264/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2023-0122
  • https://kb.netgear.com/000066265/Security-Advisory-for-Authentication-Bypass-on-Some-Cable-Modem-Routers-PSV-2023-0138

---

Vulnerability Identifier

Note: No CVE information is available for this vulnerability

---

Source

• Netgear Security Advisory

---

Related Link

• https://kb.netgear.com/000066264/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2023-0122
• https://kb.netgear.com/000066265/Security-Advisory-for-Authentication-Bypass-on-Some-Cable-Modem-Routers-PSV-2023-0138