Lucene search

[email protected]CVE-2021-44261

HistoryMar 17, 2022 - 1:15 p.m.

CVE-2021-44261

2022-03-1713:15:00

CWE-306

[email protected]

web.nvd.nist.gov

cve-2021-44261

netgear

w104

wac104-v1.0.4.13

vulnerability

authentication bypass

firmware

nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.8%

JSON

A vulnerability is in the ‘BRS_top.html’ page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device.

CPENameOperatorVersion
netgear:wac104_firmwarenetgear wac104 firmwarele1.0.4.13
netgear:r7450_firmwarenetgear r7450 firmwareeq*
netgear:r6900_firmwarenetgear r6900 firmwareeq*
netgear:r7800_firmwarenetgear r7800 firmwareeq*
netgear:r6220_firmwarenetgear r6220 firmwarele1.1.0.34_1.0.1

CPE	Name	Operator	Version
netgear:wac104_firmware	netgear wac104 firmware	le	1.0.4.13
netgear:r7450_firmware	netgear r7450 firmware	eq	*
netgear:r6900_firmware	netgear r6900 firmware	eq	*
netgear:r7800_firmware	netgear r7800 firmware	eq	*
netgear:r6220_firmware	netgear r6220 firmware	le	1.1.0.34_1.0.1

References

github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_first.md

www.netgear.com/about/security/

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.8%

JSON

Related for CVE-2021-44261

cnvd1 prion1 cvelist1