CVE-2021-45671

🗓️ 26 Dec 2021 00:25:07Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 50 Views

NETGEAR devices vulnerable to stored XSS in multiple versions prior to specified updates.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2021-45671	26 Dec 202101:15	–	attackerkb
BDU FSTEC	The vulnerability of the built-in software for routers such as CBR40, EAX80, EX7500, R7900, R8000, RAX200, RBS40V, RBW30, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, and RBK752, RBK852, arises due to the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.	25 Jan 202200:00	–	bdu_fstec
CNNVD	Netgear RBR750和NETGEAR 跨站脚本漏洞	26 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-45671	26 Dec 202100:25	–	cvelist
EUVD	EUVD-2021-32437	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45671	26 Dec 202101:15	–	nvd
Prion	Cross site scripting	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45671	22 May 202521:08	–	redhatcve

NVD

Node

netgear rax200_firmwareRange<1.0.4.120

AND

netgear rax200Match-

Node

netgear mr60_firmwareRange<1.0.6.110

AND

netgear mr60Match-

Node

netgear rax20_firmwareRange<1.0.2.82

AND

netgear rax20Match-

Node

netgear rax45_firmwareRange<1.0.2.72

AND

netgear rax45Match-

Node

netgear rax80_firmwareRange<1.0.4.120

AND

netgear rax80Match-

Node

netgear ms60_firmwareRange<1.0.6.110

AND

netgear ms60Match-

Node

netgear rax15_firmwareRange<1.0.2.82

AND

netgear rax15Match-

Node

netgear rax50_firmwareRange<1.0.2.72

AND

netgear rax50Match-

Node

netgear rax75_firmwareRange<1.0.4.120

AND

netgear rax75Match-

Node

netgear rbr750_firmwareRange<3.2.16.6

AND

netgear rbr750Match-

Node

netgear rbr850_firmwareRange<3.2.16.6

AND

netgear rbr850Match-

Node

netgear rbs750_firmwareRange<3.2.16.6

AND

netgear rbs750Match-

Node

netgear rbs850_firmwareRange<3.2.16.6

AND

netgear rbs850Match-

Node

netgear rbk752_firmwareRange<3.2.16.6

AND

netgear rbk752Match-

Node

netgear rbk852_firmwareRange<3.2.16.6

AND

netgear rbk852Match-

Node

netgear cbr40_firmwareRange<2.5.0.10

AND

netgear cbr40Match-

Node

netgear eax80_firmwareRange<1.0.1.62

AND

netgear eax80Match-

Node

netgear ex7500_firmwareRange<1.0.0.72

AND

netgear ex7500Match-

Node

netgear r7900_firmwareRange<1.0.4.38

AND

netgear r7900Match-

Node

netgear r8000_firmwareRange<1.0.4.68

AND

netgear r8000Match-

Node

netgear rbs40v_firmwareRange<2.6.1.4

AND

netgear rbs40vMatch-

Node

netgear rbw30_firmwareRange<2.6.1.4

AND

netgear rbw30Match-

Source	Link
kb	www.kb.netgear.com/000064482/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0261

17 Jun 2026 04:13Current

5Medium risk

Vulners AI Score5

CVSS 23.5

CVSS 3.14.8 - 6.5

EPSS0.00418

netgear devices stored xss version vulnerabilities cbr40 eax80 ex7500 r7900 r8000 rax200 rbs40v rbw30 mr60 rax20 rax45 rax80 ms60 rax15 rax50 rax75 rbr750 rbr850 rbs750 rbs850 rbk752 rbk852.