CVE-2021-45645

High

Description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122.

SeverityHigh
CVSS8.2
Exploit probability—
ProductNetgear Rbs50y Firmware
PublishedDec 26, 2021
First seenDec 26, 2021

How to fix

Update
  • netgear rbs50y_firmware2.7.0.122 or later
  • netgear srk60_firmware2.7.0.122 or later
  • netgear srr60_firmware2.7.0.122 or later
  • netgear srs60_firmware2.7.0.122 or later
  • netgear sxk30_firmware3.2.33.108 or later
  • netgear sxr30_firmware3.2.33.108 or later
  • netgear sxs30_firmware3.2.33.108 or later
  • netgear src60_firmware2.7.0.122 or later

Affected products

ProductAffected versionsFixed in
netgear rbs50y_firmwarev < 2.7.0.1222.7.0.122
netgear srk60_firmwarev < 2.7.0.1222.7.0.122
netgear srr60_firmwarev < 2.7.0.1222.7.0.122
netgear srs60_firmwarev < 2.7.0.1222.7.0.122
netgear sxk30_firmwarev < 3.2.33.1083.2.33.108
netgear sxr30_firmwarev < 3.2.33.1083.2.33.108
netgear sxs30_firmwarev < 3.2.33.1083.2.33.108
netgear src60_firmwarev < 2.7.0.1222.7.0.122

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.