CVE-2021-45647

Published: Dic 26, 2021 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2021-32413 Aliases: GSD-2021-45647
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,5
Source: [email protected]
Attack Vector: adjacent_network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
MEDIUM 5,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: partial
Integrity: none
Availability: none

Description

AI Translation Available

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0.1.104, R6120 before 1.0.0.76, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.78, R6850 before 1.1.0.78, R6350 before 1.1.0.78, R6330 before 1.1.0.78, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6700v2 before 1.2.0.76, R7000 before 1.0.11.116, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7200 before 1.2.0.76, R7350 before 1.2.0.76, R7400 before 1.2.0.76, R7450 before 1.2.0.76, AC2100 before 1.2.0.76, AC2400 before 1.2.0.76, AC2600 before 1.2.0.76, R7900 before 1.0.4.38, R7960P before 1.4.1.66, R8000 before 1.0.4.68, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.72, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0027
Percentile
0,5th
Updated

EPSS Score Trend (Last 91 Days)

200

Exposure of Sensitive Information to an Unauthorized Actor

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Application Data
Applicable Platforms
Technologies: Mobile, Not Technology-Specific, Web Based
Likelihood of Exploit: High
View CWE Details
Operating System

Rax200 Firmware by Netgear

Product Information
Vendor Netgear
Product Rax200 Firmware
Version Range Affected
To 1.0.3.106 (exclusive)
cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R8000P Firmware by Netgear

Product Information
Vendor Netgear
Product R8000P Firmware
Version Range Affected
To 1.4.1.66 (exclusive)
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7400 Firmware by Netgear

Product Information
Vendor Netgear
Product R7400 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:r7400_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ac2400 Firmware by Netgear

Product Information
Vendor Netgear
Product Ac2400 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:ac2400_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7450 Firmware by Netgear

Product Information
Vendor Netgear
Product R7450 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:r7450_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6260 Firmware by Netgear

Product Information
Vendor Netgear
Product R6260 Firmware
Version Range Affected
To 1.1.0.78 (exclusive)
cpe:2.3:o:netgear:r6260_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Rax80 Firmware by Netgear

Product Information
Vendor Netgear
Product Rax80 Firmware
Version Range Affected
To 1.0.3.106 (exclusive)
cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7200 Firmware by Netgear

Product Information
Vendor Netgear
Product R7200 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:r7200_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6230 Firmware by Netgear

Product Information
Vendor Netgear
Product R6230 Firmware
Version Range Affected
To 1.1.0.110 (exclusive)
cpe:2.3:o:netgear:r6230_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7350 Firmware by Netgear

Product Information
Vendor Netgear
Product R7350 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:r7350_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7960P Firmware by Netgear

Product Information
Vendor Netgear
Product R7960P Firmware
Version Range Affected
To 1.4.1.66 (exclusive)
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6850 Firmware by Netgear

Product Information
Vendor Netgear
Product R6850 Firmware
Version Range Affected
To 1.1.0.78 (exclusive)
cpe:2.3:o:netgear:r6850_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7900P Firmware by Netgear

Product Information
Vendor Netgear
Product R7900P Firmware
Version Range Affected
To 1.4.1.66 (exclusive)
cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Rax45 Firmware by Netgear

Product Information
Vendor Netgear
Product Rax45 Firmware
Version Range Affected
To 1.0.2.72 (exclusive)
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6700V2 Firmware by Netgear

Product Information
Vendor Netgear
Product R6700V2 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:r6700v2_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ac2100 Firmware by Netgear

Product Information
Vendor Netgear
Product Ac2100 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:ac2100_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Rax20 Firmware by Netgear

Product Information
Vendor Netgear
Product Rax20 Firmware
Version Range Affected
To 1.0.2.82 (exclusive)
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6900P Firmware by Netgear

Product Information
Vendor Netgear
Product R6900P Firmware
Version Range Affected
To 1.3.3.140 (exclusive)
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7900 Firmware by Netgear

Product Information
Vendor Netgear
Product R7900 Firmware
Version Range Affected
To 1.0.4.38 (exclusive)
cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ex7000 Firmware by Netgear

Product Information
Vendor Netgear
Product Ex7000 Firmware
Version Range Affected
To 1.0.1.104 (exclusive)
cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6350 Firmware by Netgear

Product Information
Vendor Netgear
Product R6350 Firmware
Version Range Affected
To 1.1.0.78 (exclusive)
cpe:2.3:o:netgear:r6350_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6120 Firmware by Netgear

Product Information
Vendor Netgear
Product R6120 Firmware
Version Range Affected
To 1.0.0.76 (exclusive)
cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ac2600 Firmware by Netgear

Product Information
Vendor Netgear
Product Ac2600 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:ac2600_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Rax75 Firmware by Netgear

Product Information
Vendor Netgear
Product Rax75 Firmware
Version Range Affected
To 1.0.3.106 (exclusive)
cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7000P Firmware by Netgear

Product Information
Vendor Netgear
Product R7000P Firmware
Version Range Affected
To 1.3.3.140 (exclusive)
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Eax80 Firmware by Netgear

Product Information
Vendor Netgear
Product Eax80 Firmware
Version Range Affected
To 1.0.1.62 (exclusive)
cpe:2.3:o:netgear:eax80_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R8000 Firmware by Netgear

Product Information
Vendor Netgear
Product R8000 Firmware
Version Range Affected
To 1.0.4.68 (exclusive)
cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Rax50 Firmware by Netgear

Product Information
Vendor Netgear
Product Rax50 Firmware
Version Range Affected
To 1.0.2.72 (exclusive)
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R7000 Firmware by Netgear

Product Information
Vendor Netgear
Product R7000 Firmware
Version Range Affected
To 1.0.11.116 (exclusive)
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6330 Firmware by Netgear

Product Information
Vendor Netgear
Product R6330 Firmware
Version Range Affected
To 1.1.0.78 (exclusive)
cpe:2.3:o:netgear:r6330_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6220 Firmware by Netgear

Product Information
Vendor Netgear
Product R6220 Firmware
Version 1.1.0.110
cpe:2.3:o:netgear:r6220_firmware:1.1.0.110:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6900V2 Firmware by Netgear

Product Information
Vendor Netgear
Product R6900V2 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:r6900v2_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

R6800 Firmware by Netgear

Product Information
Vendor Netgear
Product R6800 Firmware
Version Range Affected
To 1.2.0.76 (exclusive)
cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Rax15 Firmware by Netgear

Product Information
Vendor Netgear
Product Rax15 Firmware
Version Range Affected
To 1.0.2.82 (exclusive)
cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://kb.netgear.com/000064118/Security-Advisory-for-Sens…
Patch Vendor Advisory
https://kb.netgear.com/000064118/Security-Advisory-for-Sensitive-Information-Di…
https://kb.netgear.com/000064118/Security-Advisory-for-Sens…
Patch Vendor Advisory
https://kb.netgear.com/000064118/Security-Advisory-for-Sensitive-Information-Di…