Lucene search

K
cve[email protected]CVE-2021-45667
HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45667

2021-12-2601:15:20
CWE-79
web.nvd.nist.gov
19
netgear
devices
stored xss
vulnerability
cve-2021-45667
security
nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, RAX200 before 1.0.3.106, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, EX3700 before 1.0.0.90, MR60 before 1.0.6.110, R8000P before 1.4.1.66, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, EX3800 before 1.0.0.90, MS60 before 1.0.6.110, R7900P before 1.4.1.66, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6.

Affected configurations

NVD
Node
netgearcbr40_firmwareRange<2.5.0.10
AND
netgearcbr40Match-
Node
netgeareax20_firmwareRange<1.0.0.48
AND
netgeareax20Match-
Node
netgeareax80_firmwareRange<1.0.1.64
AND
netgeareax80Match-
Node
netgearex6120_firmwareRange<1.0.0.64
AND
netgearex6120Match-
Node
netgearex6130_firmwareRange<1.0.0.44
AND
netgearex6130Match-
Node
netgearex7500_firmwareRange<1.0.0.72
AND
netgearex7500Match-
Node
netgearr7960p_firmwareRange<1.4.1.66
AND
netgearr7960pMatch-
Node
netgearrax200_firmwareRange<1.0.3.106
AND
netgearrax200Match-
Node
netgearrbs40v_firmwareRange<2.6.1.4
AND
netgearrbs40vMatch-
Node
netgearrbw30_firmwareRange<2.6.1.4
AND
netgearrbw30Match-
Node
netgearex3700_firmwareRange<1.0.0.90
AND
netgearex3700Match-
Node
netgearmr60_firmwareRange<1.0.6.110
AND
netgearmr60Match-
Node
netgearr8000p_firmwareRange<1.4.1.66
AND
netgearr8000pMatch-
Node
netgearrax20_firmwareRange<1.0.2.82
AND
netgearrax20Match-
Node
netgearrax45_firmwareRange<1.0.2.72
AND
netgearrax45Match-
Node
netgearrax80_firmwareRange<1.0.3.106
AND
netgearrax80Match-
Node
netgearex3800_firmwareRange<1.0.0.90
AND
netgearex3800Match-
Node
netgearms60_firmwareRange<1.0.6.110
AND
netgearms60Match-
Node
netgearr7900p_firmwareRange<1.4.1.66
AND
netgearr7900pMatch-
Node
netgearrax15_firmwareRange<1.0.2.82
AND
netgearrax15Match-
Node
netgearrax50_firmwareRange1.0.2.72
AND
netgearrax50Match-
Node
netgearrax75_firmwareRange<1.0.3.106
AND
netgearrax75Match-
Node
netgearrbr750_firmwareRange<3.2.16.6
AND
netgearrbr750Match-
Node
netgearrbr850_firmwareRange<3.2.16.6
AND
netgearrbr850Match-
Node
netgearrbs750_firmwareRange<3.2.16.6
AND
netgearrbs750Match-
Node
netgearrbs850_firmwareRange<3.2.16.6
AND
netgearrbs850Match-
Node
netgearrbk752_firmwareRange<3.2.16.6
AND
netgearrbk752Match-
Node
netgearrbk852_firmwareRange<3.2.16.6
AND
netgearrbk852Match-

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

Related for CVE-2021-45667