CVE-2021-45648

Published: Dec 26, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EX6100v2 before 1.0.1.106, EX6150v2 before 1.0.1.106, EX6250 before 1.0.0.146, EX6400 before 1.0.2.164, EX6400v2 before 1.0.0.146, EX6410 before 1.0.0.146, EX6420 before 1.0.0.146, EX7300 before 1.0.2.164, EX7300v2 before 1.0.0.146, EX7320 before 1.0.0.146, EX7700 before 1.0.0.222, LBR1020 before 2.6.5.16, LBR20 before 2.6.5.2, RBK352 before 4.3.4.7, RBK50 before 2.7.3.22, RBR350 before 4.3.4.7, RBR50 before 2.7.3.22, and RBS350 before 4.3.4.7.

Affected (18)

Products: Netgear: Ex6100v2 Firmware, Ex6150v2 Firmware, Ex6250 Firmware, Ex6400 Firmware, Ex6400v2 Firmware, Ex6410 Firmware, Ex6420 Firmware, Ex7300 Firmware, Ex7300v2 Firmware, Ex7320 Firmware, Ex7700 Firmware, Lbr1020 Firmware, Lbr20 Firmware, Rbk352 Firmware, Rbk50 Firmware, Rbr350 Firmware, Rbr50 Firmware, Rbs350 Firmware

18 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex6100v2 Firmware	Before 1.0.1.106

Running on/with	Platform Versions
Netgear Ex6100v2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex6150v2 Firmware	Before 1.0.1.106

Running on/with	Platform Versions
Netgear Ex6150v2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex6250 Firmware	Before 1.0.0.146

Running on/with	Platform Versions
Netgear Ex6250	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex6400 Firmware	Before 1.0.2.164

Running on/with	Platform Versions
Netgear Ex6400	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex6400v2 Firmware	Before 1.0.0.146

Running on/with	Platform Versions
Netgear Ex6400v2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex6410 Firmware	Before 1.0.0.146

Running on/with	Platform Versions
Netgear Ex6410	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex6420 Firmware	Before 1.0.0.146

Running on/with	Platform Versions
Netgear Ex6420	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex7300 Firmware	Before 1.0.2.164

Running on/with	Platform Versions
Netgear Ex7300	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex7300v2 Firmware	Before 1.0.0.146

Running on/with	Platform Versions
Netgear Ex7300v2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex7320 Firmware	Before 1.0.0.146

Running on/with	Platform Versions
Netgear Ex7320	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex7700 Firmware	Before 1.0.0.222

Running on/with	Platform Versions
Netgear Ex7700	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Lbr1020 Firmware	Before 2.6.5.16

Running on/with	Platform Versions
Netgear Lbr1020	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Lbr20 Firmware	Before 2.6.5.2

Running on/with	Platform Versions
Netgear Lbr20	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk352 Firmware	Before 4.3.4.7

Running on/with	Platform Versions
Netgear Rbk352	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk50 Firmware	Before 2.7.3.22

Running on/with	Platform Versions
Netgear Rbk50	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr350 Firmware	Before 4.3.4.7

Running on/with	Platform Versions
Netgear Rbr350	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr50 Firmware	Before 2.7.3.22

Running on/with	Platform Versions
Netgear Rbr50	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs350 Firmware	Before 4.3.4.7

Running on/with	Platform Versions
Netgear Rbs350	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://kb.netgear.com/000064494/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0453

Source: cve@mitre.org

PatchVendor Advisory

https://kb.netgear.com/000064494/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0453

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.