CVE-2021-45648
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EX6100v2 before 1.0.1.106, EX6150v2 before 1.0.1.106, EX6250 before 1.0.0.146, EX6400 before 1.0.2.164, EX6400v2 before 1.0.0.146, EX6410 before 1.0.0.146, EX6420 before 1.0.0.146, EX7300 before 1.0.2.164, EX7300v2 before 1.0.0.146, EX7320 before 1.0.0.146, EX7700 before 1.0.0.222, LBR1020 before 2.6.5.16, LBR20 before 2.6.5.2, RBK352 before 4.3.4.7, RBK50 before 2.7.3.22, RBR350 before 4.3.4.7, RBR50 before 2.7.3.22, and RBS350 before 4.3.4.7.
Determinados dispositivos NETGEAR están afectados por una divulgación de información confidencial. Esto afecta a EX6100v2 versiones anteriores a 1.0.1.106, a EX6150v2 versiones anteriores a 1.0.1.106, a EX6250 versiones anteriores a 1.0.0.146, a EX6400 versiones anteriores a 1.0.2.164, a EX6400v2 versiones anteriores a 1.0.0.146, a EX6410 versiones anteriores a 1.0.0.146, a EX6420 versiones anteriores a 1.0.0.146, a EX7300 versiones anteriores a 1.0.2.164, a EX7300v2 versiones anteriores a 1.0.0.146 y a EX7300v2 versiones anteriores a 1.0.2.164. 0.0.146, EX7320 versiones anteriores a 1.0.0.146, EX7700 versiones anteriores a 1.0.0.222, LBR1020 versiones anteriores a 2.6.5.16, LBR20 versiones anteriores a 2.6.5.2, RBK352 versiones anteriores a 4.3.4.7, RBK50 versiones anteriores a 2.7.3.22, RBR350 versiones anteriores a 4.3.4.7, RBR50 versiones anteriores a 2.7.3.22 y RBS350 versiones anteriores a 4.3.4.7
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-12-25 CVE Reserved
- 2021-12-26 CVE Published
- 2024-08-04 CVE Updated
- 2024-09-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://kb.netgear.com/000064494/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0453 | 2022-01-10 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Ex6100v2 Firmware Search vendor "Netgear" for product "Ex6100v2 Firmware" | < 1.0.1.106 Search vendor "Netgear" for product "Ex6100v2 Firmware" and version " < 1.0.1.106" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6100v2 Search vendor "Netgear" for product "Ex6100v2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6150v2 Firmware Search vendor "Netgear" for product "Ex6150v2 Firmware" | < 1.0.1.106 Search vendor "Netgear" for product "Ex6150v2 Firmware" and version " < 1.0.1.106" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6150v2 Search vendor "Netgear" for product "Ex6150v2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6250 Firmware Search vendor "Netgear" for product "Ex6250 Firmware" | < 1.0.0.146 Search vendor "Netgear" for product "Ex6250 Firmware" and version " < 1.0.0.146" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6250 Search vendor "Netgear" for product "Ex6250" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6400 Firmware Search vendor "Netgear" for product "Ex6400 Firmware" | < 1.0.2.164 Search vendor "Netgear" for product "Ex6400 Firmware" and version " < 1.0.2.164" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6400 Search vendor "Netgear" for product "Ex6400" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6400v2 Firmware Search vendor "Netgear" for product "Ex6400v2 Firmware" | < 1.0.0.146 Search vendor "Netgear" for product "Ex6400v2 Firmware" and version " < 1.0.0.146" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6400v2 Search vendor "Netgear" for product "Ex6400v2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6410 Firmware Search vendor "Netgear" for product "Ex6410 Firmware" | < 1.0.0.146 Search vendor "Netgear" for product "Ex6410 Firmware" and version " < 1.0.0.146" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6410 Search vendor "Netgear" for product "Ex6410" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6420 Firmware Search vendor "Netgear" for product "Ex6420 Firmware" | < 1.0.0.146 Search vendor "Netgear" for product "Ex6420 Firmware" and version " < 1.0.0.146" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6420 Search vendor "Netgear" for product "Ex6420" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex7300 Firmware Search vendor "Netgear" for product "Ex7300 Firmware" | < 1.0.2.164 Search vendor "Netgear" for product "Ex7300 Firmware" and version " < 1.0.2.164" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex7300 Search vendor "Netgear" for product "Ex7300" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex7300v2 Firmware Search vendor "Netgear" for product "Ex7300v2 Firmware" | < 1.0.0.146 Search vendor "Netgear" for product "Ex7300v2 Firmware" and version " < 1.0.0.146" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex7300v2 Search vendor "Netgear" for product "Ex7300v2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex7320 Firmware Search vendor "Netgear" for product "Ex7320 Firmware" | < 1.0.0.146 Search vendor "Netgear" for product "Ex7320 Firmware" and version " < 1.0.0.146" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex7320 Search vendor "Netgear" for product "Ex7320" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex7700 Firmware Search vendor "Netgear" for product "Ex7700 Firmware" | < 1.0.0.222 Search vendor "Netgear" for product "Ex7700 Firmware" and version " < 1.0.0.222" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex7700 Search vendor "Netgear" for product "Ex7700" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Lbr1020 Firmware Search vendor "Netgear" for product "Lbr1020 Firmware" | < 2.6.5.16 Search vendor "Netgear" for product "Lbr1020 Firmware" and version " < 2.6.5.16" | - |
Affected
| in | Netgear Search vendor "Netgear" | Lbr1020 Search vendor "Netgear" for product "Lbr1020" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Lbr20 Firmware Search vendor "Netgear" for product "Lbr20 Firmware" | < 2.6.5.2 Search vendor "Netgear" for product "Lbr20 Firmware" and version " < 2.6.5.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Lbr20 Search vendor "Netgear" for product "Lbr20" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk352 Firmware Search vendor "Netgear" for product "Rbk352 Firmware" | < 4.3.4.7 Search vendor "Netgear" for product "Rbk352 Firmware" and version " < 4.3.4.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk352 Search vendor "Netgear" for product "Rbk352" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk50 Firmware Search vendor "Netgear" for product "Rbk50 Firmware" | < 2.7.3.22 Search vendor "Netgear" for product "Rbk50 Firmware" and version " < 2.7.3.22" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk50 Search vendor "Netgear" for product "Rbk50" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbr350 Firmware Search vendor "Netgear" for product "Rbr350 Firmware" | < 4.3.4.7 Search vendor "Netgear" for product "Rbr350 Firmware" and version " < 4.3.4.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbr350 Search vendor "Netgear" for product "Rbr350" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbr50 Firmware Search vendor "Netgear" for product "Rbr50 Firmware" | < 2.7.3.22 Search vendor "Netgear" for product "Rbr50 Firmware" and version " < 2.7.3.22" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbr50 Search vendor "Netgear" for product "Rbr50" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbs350 Firmware Search vendor "Netgear" for product "Rbs350 Firmware" | < 4.3.4.7 Search vendor "Netgear" for product "Rbs350 Firmware" and version " < 4.3.4.7" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbs350 Search vendor "Netgear" for product "Rbs350" | - | - |
Safe
|