CVE Feed

    Dashboard / CVE / CVE-2021-45668

    CVE-2021-45668

    Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.72, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.

    Published:Dec 26, 2021
    Last Modified:Nov 21, 2024
    EPS:Dec 26, 2021
    EPSS Score:0.00217
    CVSS Score:6.5

    Affected Products

    Vendor
    Netgear
    Product
    Eax20
    Vendor
    Netgear
    Product
    Eax20 Firmware
    Vendor
    Netgear
    Product
    Eax80
    Vendor
    Netgear
    Product
    Eax80 Firmware
    Vendor
    Netgear
    Product
    Ex3700
    Vendor
    Netgear
    Product
    Ex3700 Firmware
    Vendor
    Netgear
    Product
    Ex3800
    Vendor
    Netgear
    Product
    Ex3800 Firmware
    Vendor
    Netgear
    Product
    Ex6120
    Vendor
    Netgear
    Product
    Ex6120 Firmware
    Vendor
    Netgear
    Product
    Ex6130
    Vendor
    Netgear
    Product
    Ex6130 Firmware
    Vendor
    Netgear
    Product
    Ex7500
    Vendor
    Netgear
    Product
    Ex7500 Firmware
    Vendor
    Netgear
    Product
    R7900p
    Vendor
    Netgear
    Product
    R7900p Firmware
    Vendor
    Netgear
    Product
    R7960p
    Vendor
    Netgear
    Product
    R7960p Firmware
    Vendor
    Netgear
    Product
    R8000p
    Vendor
    Netgear
    Product
    R8000p Firmware
    Vendor
    Netgear
    Product
    Rax15
    Vendor
    Netgear
    Product
    Rax15 Firmware
    Vendor
    Netgear
    Product
    Rax20
    Vendor
    Netgear
    Product
    Rax200
    Vendor
    Netgear
    Product
    Rax200 Firmware
    Vendor
    Netgear
    Product
    Rax20 Firmware
    Vendor
    Netgear
    Product
    Rax45
    Vendor
    Netgear
    Product
    Rax45 Firmware
    Vendor
    Netgear
    Product
    Rax50
    Vendor
    Netgear
    Product
    Rax50 Firmware
    Vendor
    Netgear
    Product
    Rax75
    Vendor
    Netgear
    Product
    Rax75 Firmware
    Vendor
    Netgear
    Product
    Rax80
    Vendor
    Netgear
    Product
    Rax80 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2021-45612 (CVSS 9.6) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45617 (CVSS 9.8) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45620 (CVSS 9.6) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45621 (CVSS 9.6) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45622 (CVSS 9.6) — Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 b…
    CVE-2021-45639 (CVSS 5.2) — Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.…
    CVE-2021-45665 (CVSS 6.5) — Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.36, EAX80 before 1.0.1.62,…
    CVE-2021-45667 (CVSS 6.5) — Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48,…
    CVE-2021-45670 (CVSS 6.5) — Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48,…
    CVE-2021-38513 (CVSS 9.6) — Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 be…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High