CVE-2021-45603: Infoleak
Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial number, which can be used for a password reset. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86, R8900 before 1.0.5.38, R9000 before 1.0.5.38, RAX10 before 1.0.10.110, RAX120v1 before 1.2.3.28, RAX120v2 before 1.2.3.28, RAX70 before 1.0.10.110, RAX78 before 1.0.10.110, XR450 before 2.3.2.130, XR500 before 2.3.2.130, and XR700 before 1.0.1.46.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this NETGEAR vulnerability?
The vulnerability ID for this NETGEAR vulnerability is CVE-2021-45603.
What is the severity level of CVE-2021-45603?
The severity level of CVE-2021-45603 is medium (5.5).
Which devices are affected by CVE-2021-45603?
Devices affected by CVE-2021-45603 include NETGEAR D7800, EX2700, WN3000RPv2, and WN3000RPv3.
What is the impact of CVE-2021-45603?
CVE-2021-45603 allows disclosure of sensitive information and can be used for a password reset.
Is there a fix available for CVE-2021-45603?
Yes, NETGEAR has released firmware updates to address CVE-2021-45603, please refer to the NETGEAR advisory for more information.