Netgear Nighthawk X10-R900 up to 1.0.4.23 HTTP Header X-Forwarded-For Stored cross site scripting

Summaryinfo

A vulnerability was found in Netgear Nighthawk X10-R900 up to 1.0.4.23. It has been classified as problematic. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to cross site scripting (Stored). This vulnerability is traded as CVE-2019-12512. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Netgear Nighthawk X10-R900 up to 1.0.4.23 and classified as problematic. This issue affects an unknown code block of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For with an unknown input leads to a cross site scripting vulnerability (Stored). Using CWE to declare the problem leads to CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Impacted is integrity. The summary by CVE is:

In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, an attacker may execute stored XSS attacks against this device by supplying a malicious X-Forwarded-For header while performing an incorrect login attempt. The value supplied by this header will be inserted into administrative logs, found at Advanced settings->Administration->Logs, and may trigger when the page is viewed. Although this value is inserted into a textarea tag, the attack simply needs to supply a closing textarea tag.

The weakness was shared 02/24/2020. The identification of this vulnerability is CVE-2019-12512 since 06/01/2019. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1059.007 for this issue.

Upgrading to version 1.0.4.24 eliminates this vulnerability.

The entries VDB-150450, VDB-150448 and VDB-150447 are related to this item. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Netgear

Name

• Nighthawk X10-R900

Version

• 1.0.4.0
• 1.0.4.1
• 1.0.4.2
• 1.0.4.3
• 1.0.4.4
• 1.0.4.5
• 1.0.4.6
• 1.0.4.7
• 1.0.4.8
• 1.0.4.9
• 1.0.4.10
• 1.0.4.11
• 1.0.4.12
• 1.0.4.13
• 1.0.4.14
• 1.0.4.15
• 1.0.4.16
• 1.0.4.17
• 1.0.4.18
• 1.0.4.19
• 1.0.4.20
• 1.0.4.21
• 1.0.4.22
• 1.0.4.23

License

• commercial

Website

• Vendor: https://www.netgear.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion