Threat Investigation
Request a demo

CVE-2021-45676

Medium

Description

Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.5.126, RAX20 before 1.0.2.82, RAX80 before 1.0.5.126, RAX15 before 1.0.2.82, and RAX75 before 1.0.5.126.

SeverityMedium
CVSS4.3
Exploit probability—
ProductNetgear Rax200 Firmware
PublishedDec 26, 2021
First seenDec 26, 2021

How to fix

Update
  • netgear rax200_firmware1.0.5.126 or later
  • netgear rax20_firmware1.0.2.82 or later
  • netgear rax80_firmware1.0.5.126 or later
  • netgear rax15_firmware1.0.2.82 or later
  • netgear rax75_firmware1.0.5.126 or later

Affected products

ProductAffected versionsFixed in
netgear rax200_firmwarev < 1.0.5.1261.0.5.126
netgear rax20_firmwarev < 1.0.2.821.0.2.82
netgear rax80_firmwarev < 1.0.5.1261.0.5.126
netgear rax15_firmwarev < 1.0.2.821.0.2.82
netgear rax75_firmwarev < 1.0.5.1261.0.5.126

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.