Vulnerability Description
In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, an attacker may execute stored XSS attacks against this device by supplying a malicious X-Forwarded-For header while performing an incorrect login attempt. The value supplied by this header will be inserted into administrative logs, found at Advanced settings->Administration->Logs, and may trigger when the page is viewed. Although this value is inserted into a textarea tag, the attack simply needs to supply a closing textarea tag.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Nighthawk X10-R9000 Firmware | < 1.0.4.24 |
| Netgear | Nighthawk X10-R9000 | - |
Related Weaknesses (CWE)
References
- https://www.ise.io/casestudies/sohopelessly-broken-2-0/ExploitThird Party Advisory
- https://www.ise.io/casestudies/sohopelessly-broken-2-0/ExploitThird Party Advisory
FAQ
What is CVE-2019-12512?
CVE-2019-12512 is a vulnerability with a CVSS score of 6.1 (MEDIUM). In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, an attacker may execute stored XSS attacks against this device by supplying a malicious X-Forwarded-For header while performing an incorrect login atte...
How severe is CVE-2019-12512?
CVE-2019-12512 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-12512?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Nighthawk X10-R9000 Firmware, Netgear Nighthawk X10-R9000.