CVE-2021-45668: XSS
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.72, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| NETGEAR EAX20 | <1.0.0.48 | |
| NETGEAR EAX20 Firmware | ||
| All of | ||
| NETGEAR EAX80 firmware | <1.0.1.64 | |
| NETGEAR EAX80 firmware | ||
| All of | ||
| NETGEAR EX6120 | <1.0.0.64 | |
| Netgear EX6120 | ||
| All of | ||
| NETGEAR EX6130 | <1.0.0.44 | |
| NETGEAR EX6130 | ||
| All of | ||
| NETGEAR EX7500 | <1.0.0.72 | |
| NETGEAR EX7500 | ||
| All of | ||
| NETGEAR R7960P firmware | <1.4.1.66 | |
| NETGEAR R7960P firmware | ||
| All of | ||
| NETGEAR RAX200 firmware | <1.0.3.106 | |
| NETGEAR RAX200 firmware | ||
| All of | ||
| Netgear EX3700 | <1.0.0.90 | |
| Netgear EX3700 | ||
| All of | ||
| NETGEAR R8000P | <1.4.1.66 | |
| NETGEAR R8000P firmware | ||
| All of | ||
| NETGEAR RAX20 firmware | <1.0.2.82 | |
| NETGEAR RAX20 firmware | ||
| All of | ||
| NETGEAR RAX45 firmware | <1.0.2.72 | |
| NETGEAR RAX45 firmware | ||
| All of | ||
| NETGEAR RAX80 firmware | <1.0.3.106 | |
| NETGEAR RAX80 firmware | ||
| All of | ||
| NETGEAR EX3800 Firmware | <1.0.0.90 | |
| NETGEAR EX3800 firmware | ||
| All of | ||
| NETGEAR R7900P firmware | <1.4.1.66 | |
| NETGEAR R7900P firmware | ||
| All of | ||
| NETGEAR RAX15 firmware | <1.0.2.82 | |
| NETGEAR RAX15 firmware | ||
| All of | ||
| NETGEAR RAX50 | <=1.0.2.72 | |
| NETGEAR RAX50 | ||
| All of | ||
| NETGEAR RAX75 firmware | <1.0.3.106 | |
| NETGEAR RAX75 firmware | ||
| NETGEAR EAX20 | <1.0.0.48 | |
| NETGEAR EAX20 Firmware | ||
| NETGEAR EAX80 firmware | <1.0.1.64 | |
| NETGEAR EAX80 firmware | ||
| NETGEAR EX6120 | <1.0.0.64 | |
| Netgear EX6120 | ||
| NETGEAR EX6130 | <1.0.0.44 | |
| NETGEAR EX6130 | ||
| NETGEAR EX7500 | <1.0.0.72 | |
| NETGEAR EX7500 | ||
| NETGEAR R7960P firmware | <1.4.1.66 | |
| NETGEAR R7960P firmware | ||
| NETGEAR RAX200 firmware | <1.0.3.106 | |
| NETGEAR RAX200 firmware | ||
| Netgear EX3700 | <1.0.0.90 | |
| Netgear EX3700 | ||
| NETGEAR R8000P | <1.4.1.66 | |
| NETGEAR R8000P firmware | ||
| NETGEAR RAX20 firmware | <1.0.2.82 | |
| NETGEAR RAX20 firmware | ||
| NETGEAR RAX45 firmware | <1.0.2.72 | |
| NETGEAR RAX45 firmware | ||
| NETGEAR RAX80 firmware | <1.0.3.106 | |
| NETGEAR RAX80 firmware | ||
| NETGEAR EX3800 Firmware | <1.0.0.90 | |
| NETGEAR EX3800 firmware | ||
| NETGEAR R7900P firmware | <1.4.1.66 | |
| NETGEAR R7900P firmware | ||
| NETGEAR RAX15 firmware | <1.0.2.82 | |
| NETGEAR RAX15 firmware | ||
| NETGEAR RAX50 | <=1.0.2.72 | |
| NETGEAR RAX50 | ||
| NETGEAR RAX75 firmware | <1.0.3.106 | |
| NETGEAR RAX75 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this stored XSS vulnerability?
The vulnerability ID for this stored XSS vulnerability is CVE-2021-45668.
Which NETGEAR devices are affected by this stored XSS vulnerability?
This stored XSS vulnerability affects certain NETGEAR devices, including EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, R7900P before 1.4.1.66, and R8000P before 1.4.1.66.
What is the severity of vulnerability CVE-2021-45668?
The severity of vulnerability CVE-2021-45668 is medium with a CVSS score of 4.8.
How can I fix vulnerability CVE-2021-45668?
To fix vulnerability CVE-2021-45668, it is recommended to update the firmware of the affected NETGEAR devices to the latest version provided by the manufacturer.
Where can I find more information about this stored XSS vulnerability?
You can find more information about this stored XSS vulnerability in the Netgear Security Advisory PSV-2020-0257: [Netgear Security Advisory](https://kb.netgear.com/000064122/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Extenders-PSV-2020-0257)
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/references
- agent/first-publish-date
- agent/description
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/netgear
- canonical/netgear eax20
- canonical/netgear eax20 firmware
- canonical/netgear eax80 firmware
- canonical/netgear ex6120
- canonical/netgear ex6130
- canonical/netgear ex7500
- canonical/netgear r7960p firmware
- canonical/netgear rax200 firmware
- canonical/netgear ex3700
- canonical/netgear r8000p
- canonical/netgear r8000p firmware
- canonical/netgear rax20 firmware
- canonical/netgear rax45 firmware
- canonical/netgear rax80 firmware
- canonical/netgear ex3800 firmware
- canonical/netgear r7900p firmware
- canonical/netgear rax15 firmware
- canonical/netgear rax50
- version/netgear rax50/1.0.2.72
- canonical/netgear rax75 firmware