CVE-2021-45679 — Improper Privilege Management in Netgear R6900p Firmware

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.2HIGHNVD
CNA8.4
EPSS
0.5%
top 35.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Netgear R6900p FirmwareNetgear R7000 FirmwareNetgear R7000p Firmware+1 more
Timeline
PublishedDec 26
Latest updateDec 27

Description

Certain NETGEAR devices are affected by privilege escalation. This affects R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, and RS400 before 1.5.1.80.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages4 packages

▶NVDnetgear/r7000p_firmware< 1.3.3.140
▶NVDnetgear/r7000_firmware< 1.0.11.126
▶NVDnetgear/rs400_firmware< 1.5.1.80
▶NVDnetgear/r6900p_firmware< 1.3.3.140

🔴Vulnerability Details

2
GHSA
GHSA-w4p5-rqjf-82f3: Certain NETGEAR devices are affected by privilege escalation↗2021-12-27
▶
CVEList
CVE-2021-45679: Certain NETGEAR devices are affected by privilege escalation↗2021-12-26
▶
CVE-2021-45679 — Improper Privilege Management | cvebase