Lucene search

K
cve[email protected]CVE-2021-45669
HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45669

2021-12-2601:15:20
CWE-79
web.nvd.nist.gov
21
cve-2021-45669
netgear
stored xss
rax200
mr60
rax20
rax45
rax80
ms60
rax15
rax50
rax75
rbr750
rbr850
rbs750
rbs850
rbk752
rbk852

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6.

Affected configurations

NVD
Node
netgearrax200_firmwareRange<1.0.3.106
AND
netgearrax200Match-
Node
netgearmr60_firmwareRange<1.0.6.110
AND
netgearmr60Match-
Node
netgearrax20_firmwareRange<1.0.2.82
AND
netgearrax20Match-
Node
netgearrax45_firmwareRange<1.0.2.72
AND
netgearrax45Match-
Node
netgearrax80_firmwareRange<1.0.3.106
AND
netgearrax80Match-
Node
netgearms60_firmwareRange<1.0.6.110
AND
netgearms60Match-
Node
netgearrax15_firmwareRange<1.0.2.82
AND
netgearrax15Match-
Node
netgearrax50_firmwareRange<1.0.2.72
AND
netgearrax50Match-
Node
netgearrax75_firmwareRange<1.0.3.106
AND
netgearrax75Match-
Node
netgearrbr750_firmwareRange<3.2.16.6
AND
netgearrbr750Match-
Node
netgearrbr850_firmwareRange<3.2.16.6
AND
netgearrbr850Match-
Node
netgearrbs750_firmwareRange<3.2.16.6
AND
netgearrbs750Match-
Node
netgearrbs850_firmwareRange<3.2.16.6
AND
netgearrbs850Match-
Node
netgearrbk752_firmwareRange<3.2.16.6
AND
netgearrbk752Match-
Node
netgearrbk852_firmwareRange<3.2.16.6
AND
netgearrbk852Match-

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

Related for CVE-2021-45669