CVE-2018-21095

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 27, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-210967.4Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 beforeCVE-2018-210979.8Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WACVE-2018-210986.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-210998.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211008.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211018.0NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211028.8NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.CVE-2018-211036.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211046.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211056.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211066.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.CVE-2018-211076.8NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
CVE-2018-21095: Medium severity, CVSS 4.3 | Vulnix