Description (CNA)
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NETGEAR / XR1000v2 | affected 0 before V1.1.0.22 |
| NETGEAR / XR500 | affected 0 before v2.3.5.152 |
CWE
CWE-352
References
- https://www.netgear.com/support/product/xr500
- https://www.netgear.com/support/product/xr1000
- https://www.netgear.com/support/product/xr1000v2
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory
ADP enrichment
No English description supplied.
No references supplied.