The vulnerability of microprogrammed software in NETGEAR’s network devices such as D7800, EX2700, WN3000RPv2, and WN3000RPv3 lies in the insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information or execute arbitrary commands.

Netgear devices have insufficient data protection, enabling unauthorized access or commands.

Reporter	Title	Published	Views	Family All 8
CNNVD	Netgear NETGEAR 信息泄露漏洞	26 Dec 202100:00	–	cnnvd
CVE	CVE-2021-45603	26 Dec 202100:38	–	cve
Cvelist	CVE-2021-45603	26 Dec 202100:38	–	cvelist
EUVD	EUVD-2021-32369	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45603	26 Dec 202101:15	–	nvd
OSV	CVE-2021-45603	26 Dec 202101:15	–	osv
Prion	Design/Logic Flaw	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45603	22 May 202521:10	–	redhatcve

Vulners

Node

netgear d7800Range<1.0.1.66

netgear ex2700Range<1.0.1.68

netgear lbr1020Range<2.6.5.20

netgear lbr20Range<2.6.5.32

netgear r6700axRange<1.0.10.110

netgear r7800Range<1.0.2.86

netgear r8900Range<1.0.5.38

netgear r9000Range<1.0.5.38

netgear rax10Range<1.0.10.110

netgear rax70Range<1.0.10.110

netgear rax78Range<1.0.10.110

netgear xr450Range<2.3.2.130

netgear xr500Range<2.3.2.130

netgear xr700Range<1.0.1.46

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45603
immersivelabs	www.immersivelabs.com/resources/blog/netgear-vulnerabilities-could-put-small-business-routers-at-risk/
kb	www.kb.netgear.com/000064407/Security-Advisory-for-Post-Authentication-Command-Injection-Sensitive-Information-Disclosure-on-Multiple-Products-PSV-2021-0169-PSV-2021-0171
web	www.web.nvd.nist.gov/view/vuln/detail

25 Jan 2022 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25.2

CVSS 36.1

EPSS0.00578