Threat Investigation
Request a demo

CVE-2021-45667

Medium

Description

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, RAX200 before 1.0.3.106, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, EX3700 before 1.0.0.90, MR60 before 1.0.6.110, R8000P before 1.4.1.66, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, EX3800 before 1.0.0.90, MS60 before 1.0.6.110, R7900P before 1.4.1.66, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6.

SeverityMedium
CVSS6.5
Exploit probability—
ProductNetgear Cbr40 Firmware
PublishedDec 26, 2021
First seenDec 26, 2021

How to fix

Update
  • netgear cbr40_firmware2.5.0.10 or later
  • netgear eax20_firmware1.0.0.48 or later
  • netgear eax80_firmware1.0.1.64 or later
  • netgear ex6120_firmware1.0.0.64 or later
  • netgear ex6130_firmware1.0.0.44 or later
  • netgear ex7500_firmware1.0.0.72 or later
  • netgear r7960p_firmware1.4.1.66 or later
  • netgear rax200_firmware1.0.3.106 or later
  • netgear rbs40v_firmware2.6.1.4 or later
  • netgear rbw30_firmware2.6.1.4 or later
  • netgear ex3700_firmware1.0.0.90 or later
  • netgear mr60_firmware1.0.6.110 or later

Affected products

ProductAffected versionsFixed in
netgear cbr40_firmwarev < 2.5.0.102.5.0.10
netgear eax20_firmwarev < 1.0.0.481.0.0.48
netgear eax80_firmwarev < 1.0.1.641.0.1.64
netgear ex6120_firmwarev < 1.0.0.641.0.0.64
netgear ex6130_firmwarev < 1.0.0.441.0.0.44
netgear ex7500_firmwarev < 1.0.0.721.0.0.72
netgear r7960p_firmwarev < 1.4.1.661.4.1.66
netgear rax200_firmwarev < 1.0.3.1061.0.3.106
netgear rbs40v_firmwarev < 2.6.1.42.6.1.4
netgear rbw30_firmwarev < 2.6.1.42.6.1.4
netgear ex3700_firmwarev < 1.0.0.901.0.0.90
netgear mr60_firmwarev < 1.0.6.1101.0.6.110
netgear r8000p_firmwarev < 1.4.1.661.4.1.66
netgear rax20_firmwarev < 1.0.2.821.0.2.82
netgear rax45_firmwarev < 1.0.2.721.0.2.72
netgear rax80_firmwarev < 1.0.3.1061.0.3.106
netgear ex3800_firmwarev < 1.0.0.901.0.0.90
netgear ms60_firmwarev < 1.0.6.1101.0.6.110
netgear r7900p_firmwarev < 1.4.1.661.4.1.66
netgear rax15_firmwarev < 1.0.2.821.0.2.82
netgear rax50_firmwarev ≤ 1.0.2.72—
netgear rax75_firmwarev < 1.0.3.1061.0.3.106
netgear rbr750_firmwarev < 3.2.16.63.2.16.6
netgear rbr850_firmwarev < 3.2.16.63.2.16.6
netgear rbs750_firmwarev < 3.2.16.63.2.16.6
netgear rbs850_firmwarev < 3.2.16.63.2.16.6
netgear rbk752_firmwarev < 3.2.16.63.2.16.6
netgear rbk852_firmwarev < 3.2.16.63.2.16.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.