CVE-2021-45642

3 documents3 sources
Severity
7.2HIGH
EPSS
0.5%
top 36.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
29
Netgear D7800 FirmwareNetgear Ex6250 FirmwareNetgear Ex6400v2 Firmware+26 more
Timeline
PublishedDec 26
Latest updateDec 27

Description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.64, EX6250 before 1.0.0.134, EX7700 before 1.0.0.222, LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, R8900 before 1.0.5.26, R9000 before 1.0.5.26, XR450 before 2.3.2.66, XR500 before 2.3.2.66, XR700 before 1.0.1.36, EX7320 before 1.0.0.134, RAX120 before 1.2.2.24, EX7300v2 before 1.0.0.134, RAX120v2 before 1.2.2.24, EX6410 before 1.0.0.134, RBR10 before 2.7.3.22, RBR20 before 2.7…

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:LExploitability: 1.7 | Impact: 5.3

Affected Packages29 packages

▶NVDnetgear/rbs50y_firmware< 2.7.3.22
▶NVDnetgear/d7800_firmware< 1.0.1.64
▶NVDnetgear/lbr20_firmware< 2.6.3.50
▶NVDnetgear/r8900_firmware< 1.0.5.26

Patches

Patch: kb.netgear.com ↗Patch: kb.netgear.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-6w4x-5fpc-6gg8: Certain NETGEAR devices are affected by incorrect configuration of security settings↗2021-12-27
▶
CVEList
CVE-2021-45642: Certain NETGEAR devices are affected by incorrect configuration of security settings↗2021-12-26
▶