Description
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
NETGEAR XR1000v2
Default version status: unaffected
0 to < V1.1.0.22affected
NETGEAR XR500
Default version status: unaffected
0 to < v2.3.5.152affected