Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, RBW30 before 2.6.1.4, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, and RBS40V before 2.6.1.4.
References
Link | Resource |
---|---|
https://kb.netgear.com/000064121/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0254 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
Configuration 10 (hide)
AND |
|
Configuration 11 (hide)
AND |
|
Configuration 12 (hide)
AND |
|
Configuration 13 (hide)
AND |
|
Configuration 14 (hide)
AND |
|
Configuration 15 (hide)
AND |
|
History
05 Jan 2022, 21:19
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://kb.netgear.com/000064121/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0254 - Patch, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 4.8 |
CWE | CWE-79 | |
CPE | cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:eax80:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:cbr40:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbs40v_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbs40v:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:cbr40_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbw30_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:ex7500:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rbw30:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:eax80_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:* |
|
First Time |
Netgear rbk752 Firmware
Netgear ex7500 Firmware Netgear rbr850 Netgear rbr850 Firmware Netgear ex6130 Firmware Netgear ex3700 Netgear rbs850 Firmware Netgear rbw30 Firmware Netgear rbs750 Firmware Netgear rbr750 Firmware Netgear rbs850 Netgear ex7500 Netgear Netgear cbr40 Netgear ex3800 Netgear ex6120 Firmware Netgear cbr40 Firmware Netgear ex3800 Firmware Netgear ex3700 Firmware Netgear rbs750 Netgear rbw30 Netgear rbr750 Netgear ex6130 Netgear rbk852 Firmware Netgear eax80 Netgear eax80 Firmware Netgear rbs40v Firmware Netgear ex6120 Netgear rbk852 Netgear rbk752 Netgear rbs40v |
26 Dec 2021, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-12-26 01:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-45666
Mitre link : CVE-2021-45666
CVE.ORG link : CVE-2021-45666
JSON object : View
Products Affected
netgear
- rbw30_firmware
- rbr750
- rbs40v_firmware
- rbk852_firmware
- ex7500
- eax80_firmware
- ex7500_firmware
- ex6120_firmware
- ex6130_firmware
- cbr40_firmware
- rbr850
- cbr40
- ex3800
- rbs750_firmware
- rbs750
- rbs850_firmware
- eax80
- ex3800_firmware
- rbk852
- rbr750_firmware
- rbk752_firmware
- rbk752
- ex3700
- rbr850_firmware
- ex6120
- rbs850
- ex6130
- rbw30
- rbs40v
- ex3700_firmware
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')