Medium severity6.1NVD Advisory· Published Dec 30, 2020· Updated Jun 17, 2026

CVE-2020-35838

Description

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NETGEAR/devicesdescription
Netgear/D7800llm-fuzzy
Range: <1.0.1.56
Netgear/R7500v2llm-fuzzy
Range: <1.0.3.46
Netgear/XR700llm-fuzzy
Range: <1.0.1.10
Netgear/RAX120llm-fuzzy
Range: <1.0.0.78
Netgear/R8900llm-fuzzy
Range: <1.0.4.28
Netgear/R9000llm-fuzzy
Range: <1.0.4.28
Netgear/R7800llm-fuzzy
Range: <1.0.2.74
Netgear/Xr500llm-fuzzy
Range: <2.3.2.56

Patches

Vulnerability mechanics

References

kb.netgear.com/000062660/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2018-0509nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000