CVE-2021-45603

🗓️ 26 Dec 2021 00:38:30Reported by mitreType

NETGEAR devices affected by sensitive information disclosure via UPnP request, allowing password reset. Affects various models

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability of microprogrammed software in NETGEAR’s network devices such as D7800, EX2700, WN3000RPv2, and WN3000RPv3 lies in the insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information or execute arbitrary commands.	25 Jan 202200:00	–	bdu_fstec
CNNVD	Netgear NETGEAR 信息泄露漏洞	26 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-45603	26 Dec 202100:38	–	cvelist
EUVD	EUVD-2021-32369	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45603	26 Dec 202101:15	–	nvd
OSV	CVE-2021-45603	26 Dec 202101:15	–	osv
Prion	Design/Logic Flaw	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45603	22 May 202521:10	–	redhatcve

NVD

Node

netgear d7800_firmwareRange<1.0.1.66

AND

netgear d7800Match-

Node

netgear ex2700_firmwareRange<1.0.1.68

AND

netgear ex2700Match-

Node

netgear wn3000rpv2_firmwareRange<1.0.0.90

AND

netgear wn3000rpv2Match-

Node

netgear wn3000rpv3_firmwareRange<1.0.2.100

AND

netgear wn3000rpv3Match-

Node

netgear lbr1020_firmwareRange<2.6.5.20

AND

netgear lbr1020Match-

Node

netgear lbr20_firmwareRange<2.6.5.32

AND

netgear lbr20Match-

Node

netgear r6700ax_firmwareRange<1.0.10.110

AND

netgear r6700axMatch-

Node

netgear r7800_firmwareRange<1.0.2.86

AND

netgear r7800Match-

Node

netgear r8900_firmwareRange<1.0.5.38

AND

netgear r8900Match-

Node

netgear r9000_firmwareRange<1.0.5.38

AND

netgear r9000Match-

Node

netgear rax10_firmwareRange<1.0.10.110

AND

netgear rax10Match-

Node

netgear rax120v1_firmwareRange<1.2.3.28

AND

netgear rax120v1Match-

Node

netgear rax120v2_firmwareRange<1.2.3.28

AND

netgear rax120v2Match-

Node

netgear rax70_firmwareRange<1.0.10.110

AND

netgear rax70Match-

Node

netgear rax78_firmwareRange<1.0.10.110

AND

netgear rax78Match-

Node

netgear xr450_firmwareRange<2.3.2.130

AND

netgear xr450Match-

Node

netgear xr500_firmwareRange<2.3.2.130

AND

netgear xr500Match-

Node

netgear xr700_firmwareRange<1.0.1.46

AND

netgear xr700Match-

Source	Link
kb	www.kb.netgear.com/000064407/Security-Advisory-for-Post-Authentication-Command-Injection-Sensitive-Information-Disclosure-on-Multiple-Products-PSV-2021-0169-PSV-2021-0171
immersivelabs	www.immersivelabs.com/resources/blog/netgear-vulnerabilities-could-put-small-business-routers-at-risk/

21 Nov 2024 06:32Current

5.5Medium risk

Vulners AI Score5.5

CVSS 22.1

CVSS 3.15.5 - 6.1

EPSS0.00039

CWE-200