Lucene search

K
cve[email protected]CVE-2021-45673
HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45673

2021-12-2601:15:21
CWE-79
web.nvd.nist.gov
21
cve-2021-45673
netgear
stored xss
vulnerability
nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

22.7%

Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX200 before 1.0.3.106, R7000P before 1.3.3.140, RAX80 before 1.0.3.106, R6900P before 1.3.3.140, and RAX75 before 1.0.3.106.

Affected configurations

NVD
Node
netgearr7000_firmwareRange<1.0.11.110
AND
netgearr7000Match-
Node
netgearr7900_firmwareRange<1.0.4.30
AND
netgearr7900Match-
Node
netgearr8000_firmwareRange<1.0.4.62
AND
netgearr8000Match-
Node
netgearrax200_firmwareRange<1.0.3.106
AND
netgearrax200Match-
Node
netgearr7000p_firmwareRange<1.3.3.140
AND
netgearr7000pMatch-
Node
netgearrax80_firmwareRange<1.0.3.106
AND
netgearrax80Match-
Node
netgearr6900p_firmwareRange<1.3.3.140
AND
netgearr6900pMatch-
Node
netgearrax75_firmwareRange<1.0.3.106
AND
netgearrax75Match-

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

22.7%

Related for CVE-2021-45673