Lucene search

K
cve[email protected]CVE-2021-45670
HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45670

2021-12-2601:15:21
CWE-79
web.nvd.nist.gov
21
cve-2021-45670
netgear
stored xss
security vulnerability
nvd
cbr40
eax20
r7000
rax80

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L

5 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

22.7%

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7000 before 1.0.11.116, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.3.106, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, EX3700 before 1.0.0.90, MR60 before 1.0.6.110, R7000P before 1.3.2.126, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, EX3800 before 1.0.0.90, MS60 before 1.0.6.110, R6900P before 1.3.2.126, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6.

Affected configurations

NVD
Node
netgearrax200_firmwareRange<1.0.3.106
AND
netgearrax200Match-
Node
netgearmr60_firmwareRange<1.0.6.110
AND
netgearmr60Match-
Node
netgearrax20_firmwareRange<1.0.2.82
AND
netgearrax20Match-
Node
netgearrax45_firmwareRange<1.0.2.72
AND
netgearrax45Match-
Node
netgearrax80_firmwareRange<1.0.3.106
AND
netgearrax80Match-
Node
netgearms60_firmwareRange<1.0.6.110
AND
netgearms60Match-
Node
netgearrax15_firmwareRange<1.0.2.82
AND
netgearrax15Match-
Node
netgearrax50_firmwareRange<1.0.2.72
AND
netgearrax50Match-
Node
netgearrax75_firmwareRange<1.0.3.106
AND
netgearrax75Match-
Node
netgearrbr750_firmwareRange<3.2.16.6
AND
netgearrbr750Match-
Node
netgearrbr850_firmwareRange<3.2.16.6
AND
netgearrbr850Match-
Node
netgearrbs750_firmwareRange<3.2.16.6
AND
netgearrbs750Match-
Node
netgearrbs850_firmwareRange<3.2.16.6
AND
netgearrbs850Match-
Node
netgearrbk752_firmwareRange<3.2.16.6
AND
netgearrbk752Match-
Node
netgearrbk852_firmwareRange<3.2.16.6
AND
netgearrbk852Match-
Node
netgearcbr40_firmwareRange<2.5.0.10
AND
netgearcbr40Match-
Node
netgeareax20_firmwareRange<1.0.0.48
AND
netgeareax20Match-
Node
netgeareax80_firmwareRange<1.0.1.64
AND
netgeareax80Match-
Node
netgearex6120_firmwareRange<1.0.0.64
AND
netgearex6120Match-
Node
netgearex6130_firmwareRange<1.0.0.44
AND
netgearex6130Match-
Node
netgearex7500_firmwareRange<1.0.0.72
AND
netgearex7500Match-
Node
netgearex3700_firmwareRange<1.0.0.90
AND
netgearex3700Match-
Node
netgearex3800_firmwareRange<1.0.0.90
AND
netgearex3800Match-
Node
netgearr7000_firmwareRange<1.0.11.116
AND
netgearr7000Match-
Node
netgearr7000p_firmwareRange<1.3.2.126
AND
netgearr7000pMatch-
Node
netgearr7900_firmwareRange<1.0.4.38
AND
netgearr7900Match-
Node
netgearr8000_firmwareRange<1.0.4.68
AND
netgearr8000Match-
Node
netgearr6900p_firmwareRange<1.3.2.126
AND
netgearr6900pMatch-
Node
netgearrbs40v_firmwareRange<2.6.1.4
AND
netgearrbs40vMatch-
Node
netgearrbw30_firmwareRange<2.6.1.4
AND
netgearrbw30Match-

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L

5 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

22.7%

Related for CVE-2021-45670