CVE-2021-34870: NETGEAR XR1000 UPnP SOAPAction Missing Authentication Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.521.0.38 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP messages. The issue results from a lack of authentication required for a privileged request. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-13325.
Other sources
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP messages. The issue results from a lack of authentication required for a privileged request. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.
— ZDI
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this NETGEAR XR1000 vulnerability?
The vulnerability ID for this NETGEAR XR1000 vulnerability is CVE-2021-34870.
What is the severity of CVE-2021-34870?
CVE-2021-34870 has a severity rating of 6.5 (Medium).
How does CVE-2021-34870 affect NETGEAR XR1000 routers?
CVE-2021-34870 allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 routers.
Is authentication required to exploit CVE-2021-34870?
No, authentication is not required to exploit CVE-2021-34870.
How can I fix CVE-2021-34870?
To fix CVE-2021-34870, it is recommended to apply the necessary security updates or patches provided by NETGEAR.