What is the vulnerability ID for this security issue?

The vulnerability ID for this security issue is CVE-2021-45671.

Which devices are affected by this vulnerability?

Certain NETGEAR devices are affected, including CBR40, EAX80, EX7500, R7900, R8000, RAX200, RBS40V, RBW30, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852.

What is the severity of CVE-2021-45671?

The severity of CVE-2021-45671 is medium with a CVSS score of 4.8.

How does this vulnerability impact affected devices?

This vulnerability allows for stored cross-site scripting (XSS) attacks, which can lead to unauthorized access, data theft, and potential compromise of the affected devices.

How can I fix CVE-2021-45671?

To fix CVE-2021-45671, Netgear has released firmware updates for the affected devices. Please refer to the Netgear security advisory for specific instructions and download links.

Vulnerability/
CVE-2021-45671

medium

6.5

CWE

26/12/2021

21/11/2024

CVE-2021-45671: XSS

First published: Sun Dec 26 2021(Updated: )

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.62, EX7500 before 1.0.0.72, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.4.120, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.4.120, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.4.120, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
All of
NETGEAR RAX200 firmware	<1.0.4.120
NETGEAR RAX200 firmware
All of
NETGEAR MR60 firmware	<1.0.6.110
NETGEAR MR60 firmware
All of
NETGEAR RAX20 firmware	<1.0.2.82
NETGEAR RAX20 firmware
All of
NETGEAR RAX45 Firmware	<1.0.2.72
NETGEAR RAX45 firmware
All of
NETGEAR RAX80 firmware	<1.0.4.120
NETGEAR RAX80 firmware
All of
NETGEAR MS60	<1.0.6.110
NETGEAR MS60 firmware
All of
NETGEAR RAX15 firmware	<1.0.2.82
NETGEAR RAX15 firmware
All of
NETGEAR RAX50	<1.0.2.72
NETGEAR RAX50
All of
NETGEAR RAX75 firmware	<1.0.4.120
NETGEAR RAX75 firmware
All of
NETGEAR RBR750	<3.2.16.6
NETGEAR RBR750 firmware
All of
NETGEAR RBR850 firmware	<3.2.16.6
NETGEAR RBR850 firmware
All of
NETGEAR RBS750	<3.2.16.6
NETGEAR RBS750
All of
NETGEAR RBS850	<3.2.16.6
NETGEAR RBS850 firmware
All of
NETGEAR RBK752 firmware	<3.2.16.6
NETGEAR RBK752 firmware
All of
NETGEAR RBK852	<3.2.16.6
NETGEAR RBK852
All of
NETGEAR CBR40 firmware	<2.5.0.10
Netgear CBR40
All of
NETGEAR EAX80 firmware	<1.0.1.62
NETGEAR EAX80 firmware
All of
NETGEAR EX7500	<1.0.0.72
NETGEAR EX7500
All of
NETGEAR R7900P firmware	<1.0.4.38
NETGEAR R7900P firmware
All of
NETGEAR R8000 firmware	<1.0.4.68
NETGEAR R8000 firmware
All of
NETGEAR RBS40V	<2.6.1.4
NETGEAR RBS40V-200
All of
NETGEAR RBW30 firmware	<2.6.1.4
NETGEAR RBW30 firmware
NETGEAR RAX200 firmware	<1.0.4.120
NETGEAR RAX200 firmware
NETGEAR MR60 firmware	<1.0.6.110
NETGEAR MR60 firmware
NETGEAR RAX20 firmware	<1.0.2.82
NETGEAR RAX20 firmware
NETGEAR RAX45 Firmware	<1.0.2.72
NETGEAR RAX45 firmware
NETGEAR RAX80 firmware	<1.0.4.120
NETGEAR RAX80 firmware
NETGEAR MS60	<1.0.6.110
NETGEAR MS60 firmware
NETGEAR RAX15 firmware	<1.0.2.82
NETGEAR RAX15 firmware
NETGEAR RAX50	<1.0.2.72
NETGEAR RAX50
NETGEAR RAX75 firmware	<1.0.4.120
NETGEAR RAX75 firmware
NETGEAR RBR750	<3.2.16.6
NETGEAR RBR750 firmware
NETGEAR RBR850 firmware	<3.2.16.6
NETGEAR RBR850 firmware
NETGEAR RBS750	<3.2.16.6
NETGEAR RBS750
NETGEAR RBS850	<3.2.16.6
NETGEAR RBS850 firmware
NETGEAR RBK752 firmware	<3.2.16.6
NETGEAR RBK752 firmware
NETGEAR RBK852	<3.2.16.6
NETGEAR RBK852
NETGEAR CBR40 firmware	<2.5.0.10
Netgear CBR40
NETGEAR EAX80 firmware	<1.0.1.62
NETGEAR EAX80 firmware
NETGEAR EX7500	<1.0.0.72
NETGEAR EX7500
NETGEAR R7900P firmware	<1.0.4.38
NETGEAR R7900P firmware
NETGEAR R8000 firmware	<1.0.4.68
NETGEAR R8000 firmware
NETGEAR RBS40V	<2.6.1.4
NETGEAR RBS40V-200
NETGEAR RBW30 firmware	<2.6.1.4
NETGEAR RBW30 firmware

Remedy

https://kb.netgear.com/000064482/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0261

Never miss a vulnerability like this again

Reference Links

https://kb.netgear.com/000064482/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0261

Frequently Asked Questions

What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2021-45671.
Which devices are affected by this vulnerability?
Certain NETGEAR devices are affected, including CBR40, EAX80, EX7500, R7900, R8000, RAX200, RBS40V, RBW30, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852.
What is the severity of CVE-2021-45671?
The severity of CVE-2021-45671 is medium with a CVSS score of 4.8.
How does this vulnerability impact affected devices?
This vulnerability allows for stored cross-site scripting (XSS) attacks, which can lead to unauthorized access, data theft, and potential compromise of the affected devices.
How can I fix CVE-2021-45671?
To fix CVE-2021-45671, Netgear has released firmware updates for the affected devices. Please refer to the Netgear security advisory for specific instructions and download links.