CVE-2021-38533

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources
Severity
5.4MEDIUM
EPSS
0.3%
top 47.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netgear Rax40 Firmware
Timeline
PublishedAug 11
Latest updateDec 11

Description

NETGEAR RAX40 devices before 1.0.3.64 are affected by stored XSS.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages1 packages

▶NVDnetgear/rax40_firmware< 1.0.3.64

🔴Vulnerability Details

3
OSV
binutils vulnerabilities↗2023-12-11
▶
GHSA
GHSA-49pf-p4w2-92m4: NETGEAR RAX40 devices before 1↗2022-05-24
▶
CVEList
CVE-2021-38533: NETGEAR RAX40 devices before 1↗2021-08-10
▶
CVE-2021-38533 (MEDIUM CVSS 5.4) | NETGEAR RAX40 devices before 1.0.3. | cvebase.io