CVE-2021-44261

Name of the Vulnerable Software and Affected Versions Netgear W104 version WAC104-V1.0.4.13 Netgear WAC104 (affected versions not specified) Netgear R7450 (affected versions not specified) Netgear R6900v2 (affected versions not specified) Netgear R7800 (affected versions not specified) Netgear R6220 (affected versions not specified)

Description A vulnerability in the 'BRS top.html' page can allow a remote attacker to access this page without any authentication, exposing firmware version information for the device. The issue is related to deficiencies in the authentication procedure when processing the BRS top.html web page.

Recommendations For Netgear W104 version WAC104-V1.0.4.13, consider restricting access to the BRS top.html page until a patch is available. For Netgear WAC104, R7450, R6900v2, R7800, and R6220, restrict access to the BRS top.html page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.