cbcvebase.
CVE-2021-45645
published 2021-12-26

CVE-2021-45645: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60…

PriorityP350critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.86%
54.5th percentile
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122.

Affected

8 ranges
VendorProductVersion rangeFixed in
netgearrbs50y_firmware< 2.7.0.1222.7.0.122
netgearsrc60_firmware< 2.7.0.1222.7.0.122
netgearsrk60_firmware< 2.7.0.1222.7.0.122
netgearsrr60_firmware< 2.7.0.1222.7.0.122
netgearsrs60_firmware< 2.7.0.1222.7.0.122
netgearsxk30_firmware< 3.2.33.1083.2.33.108
netgearsxr30_firmware< 3.2.33.1083.2.33.108
netgearsxs30_firmware< 3.2.33.1083.2.33.108

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.