Sign-up

ID

VAR-202112-2205


CVE

CVE-2021-45516


TITLE

plural  NETGEAR  Vulnerabilities in devices

Trust: 0.8

sources: JVNDB: JVNDB-2021-017113

DESCRIPTION

Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R8000 before 1.0.4.74, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11. plural NETGEAR There is an unspecified vulnerability in the device.Service operation interruption (DoS) It may be in a state. This affects R6400 prior to 1.0.1.70, R7000 prior to 1.0.11.126, R6900P prior to 1.3.3.140, R7000P prior to 1.3.3.140, R8000 prior to 1.0.4.74, RBK852 prior to 3.2.10.11, RBR850 prior to 3.2.10.11, and RBS850 prior to 3.2.10.11

Trust: 1.71

sources: NVD: CVE-2021-45516 // JVNDB: JVNDB-2021-017113 // VULMON: CVE-2021-45516

AFFECTED PRODUCTS

vendor:netgearmodel:rbr850scope:ltversion:3.2.10.11

Trust: 1.0

vendor:netgearmodel:r6400scope:ltversion:1.0.1.70

Trust: 1.0

vendor:netgearmodel:r6900pscope:ltversion:1.3.3.140

Trust: 1.0

vendor:netgearmodel:r8000scope:ltversion:1.0.4.74

Trust: 1.0

vendor:netgearmodel:rbs850scope:ltversion:3.2.10.11

Trust: 1.0

vendor:netgearmodel:rbk852scope:ltversion:3.2.10.11

Trust: 1.0

vendor:netgearmodel:r7000scope:ltversion:1.0.11.126

Trust: 1.0

vendor:netgearmodel:r7000pscope:ltversion:1.3.3.140

Trust: 1.0

vendor:ネットギアmodel:r6400scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbk852scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r7000pscope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbr850scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r7000scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r6900pscope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbs850scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:r8000scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2021-017113 // NVD: CVE-2021-45516

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-45516
value: MEDIUM

Trust: 1.0

cve@mitre.org: CVE-2021-45516
value: MEDIUM

Trust: 1.0

NVD: CVE-2021-45516
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202112-2330
value: MEDIUM

Trust: 0.6

VULMON: CVE-2021-45516
value: LOW

Trust: 0.1

nvd@nist.gov: CVE-2021-45516
severity: LOW
baseScore: 2.7
vectorString: AV:A/AC:L/AU:S/C:N/I:N/A:P
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 5.1
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

nvd@nist.gov: CVE-2021-45516
baseSeverity: MEDIUM
baseScore: 4.5
vectorString: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 0.9
impactScore: 3.6
version: 3.1

Trust: 1.0

cve@mitre.org: CVE-2021-45516
baseSeverity: MEDIUM
baseScore: 6.9
vectorString: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: HIGH
exploitabilityScore: 1.7
impactScore: 4.7
version: 3.1

Trust: 1.0

NVD: CVE-2021-45516
baseSeverity: MEDIUM
baseScore: 4.5
vectorString: CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULMON: CVE-2021-45516 // JVNDB: JVNDB-2021-017113 // CNNVD: CNNVD-202112-2330 // NVD: CVE-2021-45516 // NVD: CVE-2021-45516

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:Lack of information (CWE-noinfo) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2021-017113 // NVD: CVE-2021-45516

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202112-2330

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202112-2330

PATCH

title:Security Advisory for Denial of Service on Some Routers and WiFi Systems, PSV-2019-0115url:https://kb.netgear.com/000064060/Security-Advisory-for-Denial-of-Service-on-Some-Routers-and-WiFi-Systems-PSV-2019-0115

Trust: 0.8

title:Netgear NETGEAR Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=177076

Trust: 0.6

sources: JVNDB: JVNDB-2021-017113 // CNNVD: CNNVD-202112-2330

EXTERNAL IDS

db:NVDid:CVE-2021-45516

Trust: 3.3

db:JVNDBid:JVNDB-2021-017113

Trust: 0.8

db:CNNVDid:CNNVD-202112-2330

Trust: 0.6

db:VULMONid:CVE-2021-45516

Trust: 0.1

sources: VULMON: CVE-2021-45516 // JVNDB: JVNDB-2021-017113 // CNNVD: CNNVD-202112-2330 // NVD: CVE-2021-45516

REFERENCES

url:https://kb.netgear.com/000064060/security-advisory-for-denial-of-service-on-some-routers-and-wifi-systems-psv-2019-0115

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2021-45516

Trust: 1.4

url:https://cwe.mitre.org/data/definitions/.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2021-45516 // JVNDB: JVNDB-2021-017113 // CNNVD: CNNVD-202112-2330 // NVD: CVE-2021-45516

SOURCES

db:VULMONid:CVE-2021-45516
db:JVNDBid:JVNDB-2021-017113
db:CNNVDid:CNNVD-202112-2330
db:NVDid:CVE-2021-45516

LAST UPDATE DATE

2024-11-23T22:29:10.441000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2021-45516date:2022-01-05T00:00:00
db:JVNDBid:JVNDB-2021-017113date:2023-01-04T06:53:00
db:CNNVDid:CNNVD-202112-2330date:2022-01-06T00:00:00
db:NVDid:CVE-2021-45516date:2024-11-21T06:32:23.850

SOURCES RELEASE DATE

db:VULMONid:CVE-2021-45516date:2021-12-26T00:00:00
db:JVNDBid:JVNDB-2021-017113date:2023-01-04T00:00:00
db:CNNVDid:CNNVD-202112-2330date:2021-12-26T00:00:00
db:NVDid:CVE-2021-45516date:2021-12-26T01:15:13.670