CVE-2021-41449

2021-12-0913:05:13

mitre

www.cve.org

netgear

routers

web interface

path traversal

vulnerability

http packet

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

27.4%

JSON

A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet.