Threat Investigation
Request a demo

CVE-2021-45674

Low

Description

Certain NETGEAR devices are affected by stored XSS. This affects R7000 before 1.0.11.110, R7900 before 1.0.4.30, R8000 before 1.0.4.62, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.

SeverityLow
CVSS3.2
Exploit probability—
ProductNetgear R7000 Firmware
PublishedDec 26, 2021
First seenDec 26, 2021

How to fix

Update
  • netgear r7000_firmware1.0.11.110 or later
  • netgear r7900_firmware1.0.4.30 or later
  • netgear r8000_firmware1.0.4.62 or later
  • netgear rax15_firmware1.0.2.82 or later
  • netgear rax20_firmware1.0.2.82 or later
  • netgear rax200_firmware1.0.3.106 or later
  • netgear rax75_firmware1.0.3.106 or later
  • netgear rax80_firmware1.0.3.106 or later

Affected products

ProductAffected versionsFixed in
netgear r7000_firmwarev < 1.0.11.1101.0.11.110
netgear r7900_firmwarev < 1.0.4.301.0.4.30
netgear r8000_firmwarev < 1.0.4.621.0.4.62
netgear rax15_firmwarev < 1.0.2.821.0.2.82
netgear rax20_firmwarev < 1.0.2.821.0.2.82
netgear rax200_firmwarev < 1.0.3.1061.0.3.106
netgear rax75_firmwarev < 1.0.3.1061.0.3.106
netgear rax80_firmwarev < 1.0.3.1061.0.3.106

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.