Lucene search

MitreCVE-2021-45668

HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45668

2021-12-2601:15:20

CWE-79

mitre

web.nvd.nist.gov

cve-2021-45668

netgear

stored xss

security vulnerability

nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.72, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.

Affected configurations

Nvd

Node

netgeareax20_firmwareRange<1.0.0.48

AND

netgeareax20Match-

Node

netgeareax80_firmwareRange<1.0.1.64

AND

netgeareax80Match-

Node

netgearex6120_firmwareRange<1.0.0.64

AND

netgearex6120Match-

Node

netgearex6130_firmwareRange<1.0.0.44

AND

netgearex6130Match-

Node

netgearex7500_firmwareRange<1.0.0.72

AND

netgearex7500Match-

Node

netgearr7960p_firmwareRange<1.4.1.66

AND

netgearr7960pMatch-

Node

netgearrax200_firmwareRange<1.0.3.106

AND

netgearrax200Match-

Node

netgearex3700_firmwareRange<1.0.0.90

AND

netgearex3700Match-

Node

netgearr8000p_firmwareRange<1.4.1.66

AND

netgearr8000pMatch-

Node

netgearrax20_firmwareRange<1.0.2.82

AND

netgearrax20Match-

Node

netgearrax45_firmwareRange<1.0.2.72

AND

netgearrax45Match-

Node

netgearrax80_firmwareRange<1.0.3.106

AND

netgearrax80Match-

Node

netgearex3800_firmwareRange<1.0.0.90

AND

netgearex3800Match-

Node

netgearr7900p_firmwareRange<1.4.1.66

AND

netgearr7900pMatch-

Node

netgearrax15_firmwareRange<1.0.2.82

AND

netgearrax15Match-

Node

netgearrax50_firmwareRange≤1.0.2.72

AND

netgearrax50Match-

Node

netgearrax75_firmwareRange<1.0.3.106

AND

netgearrax75Match-

VendorProductVersionCPE
netgeareax20_firmware*cpe:2.3:o:netgear:eax20_firmware:*:*:*:*:*:*:*:*
netgeareax20-cpe:2.3:h:netgear:eax20:-:*:*:*:*:*:*:*
netgeareax80_firmware*cpe:2.3:o:netgear:eax80_firmware:*:*:*:*:*:*:*:*
netgeareax80-cpe:2.3:h:netgear:eax80:-:*:*:*:*:*:*:*
netgearex6120_firmware*cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*
netgearex6120-cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*
netgearex6130_firmware*cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*
netgearex6130-cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*
netgearex7500_firmware*cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:*
netgearex7500-cpe:2.3:h:netgear:ex7500:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	eax20_firmware	*	cpe:2.3:o:netgear:eax20_firmware::::::::
netgear	eax20	-	cpe:2.3:h:netgear:eax20:-:::::::*
netgear	eax80_firmware	*	cpe:2.3:o:netgear:eax80_firmware::::::::
netgear	eax80	-	cpe:2.3:h:netgear:eax80:-:::::::*
netgear	ex6120_firmware	*	cpe:2.3:o:netgear:ex6120_firmware::::::::
netgear	ex6120	-	cpe:2.3:h:netgear:ex6120:-:::::::*
netgear	ex6130_firmware	*	cpe:2.3:o:netgear:ex6130_firmware::::::::
netgear	ex6130	-	cpe:2.3:h:netgear:ex6130:-:::::::*
netgear	ex7500_firmware	*	cpe:2.3:o:netgear:ex7500_firmware::::::::
netgear	ex7500	-	cpe:2.3:h:netgear:ex7500:-:::::::*

Rows per page:

1-10 of 341

References

kb.netgear.com/000064122/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Extenders-PSV-2020-0257

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Related for CVE-2021-45668