PT-2021-6218

CVE-2021-45670

·

Published

2021-12-21

·

Updated

2022-01-06

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:M/Au:S/C:P/I:C/A:P
Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.10 NETGEAR EAX20 versions prior to 1.0.0.48 NETGEAR EAX80 versions prior to 1.0.1.64 NETGEAR EX6120 versions prior to 1.0.0.64 NETGEAR EX6130 versions prior to 1.0.0.44 NETGEAR EX7500 versions prior to 1.0.0.72 NETGEAR R7000 versions prior to 1.0.11.116 NETGEAR R7900 versions prior to 1.0.4.38 NETGEAR R8000 versions prior to 1.0.4.68 NETGEAR RAX200 versions prior to 1.0.3.106 NETGEAR RBS40V versions prior to 2.6.1.4 NETGEAR RBW30 versions prior to 2.6.1.4 NETGEAR EX3700 versions prior to 1.0.0.90 NETGEAR MR60 versions prior to 1.0.6.110 NETGEAR R7000P versions prior to 1.3.2.126 NETGEAR RAX20 versions prior to 1.0.2.82 NETGEAR RAX45 versions prior to 1.0.2.72 NETGEAR RAX80 versions prior to 1.0.3.106 NETGEAR EX3800 versions prior to 1.0.0.90 NETGEAR MS60 versions prior to 1.0.6.110 NETGEAR R6900P versions prior to 1.3.2.126 NETGEAR RAX15 versions prior to 1.0.2.82 NETGEAR RAX50 versions prior to 1.0.2.72 NETGEAR RAX75 versions prior to 1.0.3.106 NETGEAR RBR750 versions prior to 3.2.16.6 NETGEAR RBR850 versions prior to 3.2.16.6 NETGEAR RBS750 versions prior to 3.2.16.6 NETGEAR RBS850 versions prior to 3.2.16.6 NETGEAR RBK752 versions prior to 3.2.16.6 NETGEAR RBK852 versions prior to 3.2.16.6
Description The issue is caused by the lack of protection for the web page structure, allowing a remote attacker to impact the confidentiality, integrity, and availability of protected information. This is a stored XSS vulnerability.
Recommendations Update NETGEAR CBR40 to version 2.5.0.10 or later Update NETGEAR EAX20 to version 1.0.0.48 or later Update NETGEAR EAX80 to version 1.0.1.64 or later Update NETGEAR EX6120 to version 1.0.0.64 or later Update NETGEAR EX6130 to version 1.0.0.44 or later Update NETGEAR EX7500 to version 1.0.0.72 or later Update NETGEAR R7000 to version 1.0.11.116 or later Update NETGEAR R7900 to version 1.0.4.38 or later Update NETGEAR R8000 to version 1.0.4.68 or later Update NETGEAR RAX200 to version 1.0.3.106 or later Update NETGEAR RBS40V to version 2.6.1.4 or later Update NETGEAR RBW30 to version 2.6.1.4 or later Update NETGEAR EX3700 to version 1.0.0.90 or later Update NETGEAR MR60 to version 1.0.6.110 or later Update NETGEAR R7000P to version 1.3.2.126 or later Update NETGEAR RAX20 to version 1.0.2.82 or later Update NETGEAR RAX45 to version 1.0.2.72 or later Update NETGEAR RAX80 to version 1.0.3.106 or later Update NETGEAR EX3800 to version 1.0.0.90 or later Update NETGEAR MS60 to version 1.0.6.110 or later Update NETGEAR R6900P to version 1.3.2.126 or later Update NETGEAR RAX15 to version 1.0.2.82 or later Update NETGEAR RAX50 to version 1.0.2.72 or later Update NETGEAR RAX75 to version 1.0.3.106 or later Update NETGEAR RBR750 to version 3.2.16.6 or later Update NETGEAR RBR850 to version 3.2.16.6 or later Update NETGEAR RBS750 to version 3.2.16.6 or later Update NETGEAR RBS850 to version 3.2.16.6 or later Update NETGEAR RBK752 to version 3.2.16.6 or later Update NETGEAR RBK852 to version 3.2.16.6 or later
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾