Lucene search

[email protected]CVE-2021-45642

HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45642

2021-12-2601:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

netgear

devices

security

settings

configuration

vulnerability

cve-2021-45642

nvd

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

42.6%

JSON

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.64, EX6250 before 1.0.0.134, EX7700 before 1.0.0.222, LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, R8900 before 1.0.5.26, R9000 before 1.0.5.26, XR450 before 2.3.2.66, XR500 before 2.3.2.66, XR700 before 1.0.1.36, EX7320 before 1.0.0.134, RAX120 before 1.2.2.24, EX7300v2 before 1.0.0.134, RAX120v2 before 1.2.2.24, EX6410 before 1.0.0.134, RBR10 before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, EX6420 before 1.0.0.134, RBS10 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, EX6400v2 before 1.0.0.134, RBK12 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22.

CPENameOperatorVersion
netgear:d7800_firmwarenetgear d7800 firmwarelt1.0.1.64
netgear:ex6250_firmwarenetgear ex6250 firmwarelt1.0.0.134
netgear:ex7700_firmwarenetgear ex7700 firmwarelt1.0.0.222
netgear:lbr20_firmwarenetgear lbr20 firmwarelt2.6.3.50
netgear:rbs50y_firmwarenetgear rbs50y firmwarelt2.7.3.22
netgear:rbs50_firmwarenetgear rbs50 firmwarelt2.7.3.22
netgear:rbs20_firmwarenetgear rbs20 firmwarelt2.7.3.22
netgear:rbs10_firmwarenetgear rbs10 firmwarelt2.7.3.22
netgear:rbs40_firmwarenetgear rbs40 firmwarelt2.7.3.22
netgear:r8900_firmwarenetgear r8900 firmwarelt1.0.5.26

CPE	Name	Operator	Version
netgear:d7800_firmware	netgear d7800 firmware	lt	1.0.1.64
netgear:ex6250_firmware	netgear ex6250 firmware	lt	1.0.0.134
netgear:ex7700_firmware	netgear ex7700 firmware	lt	1.0.0.222
netgear:lbr20_firmware	netgear lbr20 firmware	lt	2.6.3.50
netgear:rbs50y_firmware	netgear rbs50y firmware	lt	2.7.3.22
netgear:rbs50_firmware	netgear rbs50 firmware	lt	2.7.3.22
netgear:rbs20_firmware	netgear rbs20 firmware	lt	2.7.3.22
netgear:rbs10_firmware	netgear rbs10 firmware	lt	2.7.3.22
netgear:rbs40_firmware	netgear rbs40 firmware	lt	2.7.3.22
netgear:r8900_firmware	netgear r8900 firmware	lt	1.0.5.26

Rows per page:

1-10 of 291

References

kb.netgear.com/000064491/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0427

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

42.6%

JSON

Related for CVE-2021-45642

cvelist1 prion1