Details of VAR-202108-1621

ID

VAR-202108-1621

CVE

CVE-2021-38515

TITLE

plural NETGEAR Vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2021-010412

DESCRIPTION

Certain NETGEAR devices are affected by denial of service. This affects R6400v2 before 1.0.4.98, R6700v3 before 1.0.4.98, R7900 before 1.0.3.18, and R8000 before 1.0.4.46. plural NETGEAR There is an unspecified vulnerability in the device.Service operation interruption (DoS) It may be in a state. This affects R6400v2 prior to 1.0.4.98, R6700v3 prior to 1.0.4.98, R7900 prior to 1.0.3.18, and R8000 prior to 1.0.4.46

Trust: 1.71

sources: NVD: CVE-2021-38515 // JVNDB: JVNDB-2021-010412 // VULMON: CVE-2021-38515

AFFECTED PRODUCTS

vendor:	netgear	model:	r8000	scope:	lt	version:	1.0.4.46	Trust: 1.0
vendor:	netgear	model:	r7900	scope:	lt	version:	1.0.3.18	Trust: 1.0
vendor:	netgear	model:	r6400	scope:	lt	version:	1.0.4.98	Trust: 1.0
vendor:	netgear	model:	r6700	scope:	lt	version:	1.0.4.98	Trust: 1.0
vendor:	ネットギア	model:	r6700	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r8000	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r6400	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r7900	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-010412 // NVD: CVE-2021-38515

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-38515
value:	HIGH
Trust: 1.0
cve@mitre.org:	CVE-2021-38515
value:	HIGH
Trust: 1.0
NVD:	CVE-2021-38515
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202108-960
value:	HIGH
Trust: 0.6
VULMON:	CVE-2021-38515
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2021-38515
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9

nvd@nist.gov:	CVE-2021-38515
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 1.0
cve@mitre.org:	CVE-2021-38515
baseSeverity:	HIGH
baseScore:	7.4
vectorString:	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	4.0
version:	3.1
Trust: 1.0
NVD:	CVE-2021-38515
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULMON: CVE-2021-38515 // JVNDB: JVNDB-2021-010412 // CNNVD: CNNVD-202108-960 // NVD: CVE-2021-38515 // NVD: CVE-2021-38515

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-010412 // NVD: CVE-2021-38515

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202108-960

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202108-960

PATCH

title:	Security Advisory for Denial of Service on Some Routers, PSV-2019-0082	url:	https://kb.netgear.com/000063768/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2019-0082	Trust: 0.8
title:	Netgear NETGEAR Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=159354	Trust: 0.6

sources: JVNDB: JVNDB-2021-010412 // CNNVD: CNNVD-202108-960

EXTERNAL IDS

db:	NVD	id:	CVE-2021-38515	Trust: 3.3
db:	JVNDB	id:	JVNDB-2021-010412	Trust: 0.8
db:	CNNVD	id:	CNNVD-202108-960	Trust: 0.6
db:	VULMON	id:	CVE-2021-38515	Trust: 0.1

sources: VULMON: CVE-2021-38515 // JVNDB: JVNDB-2021-010412 // CNNVD: CNNVD-202108-960 // NVD: CVE-2021-38515

REFERENCES

url:	https://kb.netgear.com/000063768/security-advisory-for-denial-of-service-on-some-routers-psv-2019-0082	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2021-38515	Trust: 1.4
url:	https://cwe.mitre.org/data/definitions/.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2021-38515 // JVNDB: JVNDB-2021-010412 // CNNVD: CNNVD-202108-960 // NVD: CVE-2021-38515

SOURCES

db:	VULMON	id:	CVE-2021-38515
db:	JVNDB	id:	JVNDB-2021-010412
db:	CNNVD	id:	CNNVD-202108-960
db:	NVD	id:	CVE-2021-38515

LAST UPDATE DATE

2024-08-14T14:11:15.563000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2021-38515	date:	2021-08-18T00:00:00
db:	JVNDB	id:	JVNDB-2021-010412	date:	2022-07-01T01:48:00
db:	CNNVD	id:	CNNVD-202108-960	date:	2021-08-19T00:00:00
db:	NVD	id:	CVE-2021-38515	date:	2021-08-18T19:31:53.553

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2021-38515	date:	2021-08-11T00:00:00
db:	JVNDB	id:	JVNDB-2021-010412	date:	2022-07-01T00:00:00
db:	CNNVD	id:	CNNVD-202108-960	date:	2021-08-10T00:00:00
db:	NVD	id:	CVE-2021-38515	date:	2021-08-11T00:15:20.520