CVE-2021-45674: XSS
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear R7000 Firmware | <1.0.11.110 | |
| NETGEAR R7000 | ||
| Netgear R7900 Firmware | <1.0.4.30 | |
| Netgear R7900 | ||
| Netgear R8000 Firmware | <1.0.4.62 | |
| NETGEAR R8000 | ||
| Netgear Rax15 Firmware | <1.0.2.82 | |
| Netgear Rax15 | ||
| Netgear Rax20 Firmware | <1.0.2.82 | |
| Netgear Rax20 | ||
| Netgear Rax200 Firmware | <1.0.3.106 | |
| NETGEAR RAX200 | ||
| Netgear Rax75 Firmware | <1.0.3.106 | |
| Netgear Rax75 | ||
| Netgear Rax80 Firmware | <1.0.3.106 | |
| Netgear Rax80 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-45674?
The severity of CVE-2021-45674 is medium with a severity value of 4.8.
Which NETGEAR devices are affected by CVE-2021-45674?
NETGEAR devices R7000, R7900, R8000, RAX15, RAX20, RAX200, RAX75, and RAX80 are affected by CVE-2021-45674.
How does CVE-2021-45674 impact the affected NETGEAR devices?
CVE-2021-45674 allows for stored cross-site scripting (XSS) attacks on the affected NETGEAR devices.
What is the recommended firmware version to fix CVE-2021-45674?
To fix CVE-2021-45674, update the firmware of the affected NETGEAR devices to version 1.0.11.110 for R7000, 1.0.4.30 for R7900, 1.0.4.62 for R8000, 1.0.2.82 for RAX15 and RAX20, and 1.0.3.106 for RAX200, RAX75, and RAX80.
Where can I find more information about CVE-2021-45674?
More information about CVE-2021-45674 can be found in the Netgear Security Advisory for Stored Cross-Site Scripting on Some Routers (PSV-2020-0017).
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/netgear
- canonical/netgear r7000 firmware
- canonical/netgear r7000
- canonical/netgear r7900 firmware
- canonical/netgear r7900
- canonical/netgear r8000 firmware
- canonical/netgear r8000
- canonical/netgear rax15 firmware
- canonical/netgear rax15
- canonical/netgear rax20 firmware
- canonical/netgear rax20
- canonical/netgear rax200 firmware
- canonical/netgear rax200
- canonical/netgear rax75 firmware
- canonical/netgear rax75
- canonical/netgear rax80 firmware
- canonical/netgear rax80