ID
VAR-202112-2274
CVE
CVE-2021-45675
TITLE
plural NETGEAR Cross-site scripting vulnerabilities in devices
Trust: 0.8
DESCRIPTION
Certain NETGEAR devices are affected by stored XSS. This affects R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6850 before 1.1.0.78, R6350 before 1.1.0.78, R6330 before 1.1.0.78, R6800 before 1.2.0.76, R6700v2 before 1.2.0.76, R6900v2 before 1.2.0.76, R7200 before 1.2.0.76, R7350 before 1.2.0.76, R7400 before 1.2.0.76, R7450 before 1.2.0.76, AC2100 before 1.2.0.76, AC2400 before 1.2.0.76, and AC2600 before 1.2.0.76. plural NETGEAR A cross-site scripting vulnerability exists in the device.Information may be obtained and information may be tampered with. This affects R6120 prior to 1.0.0.76, R6260 prior to 1.1.0.78, R6850 prior to 1.1.0.78, R6350 prior to 1.1.0.78, R6330 prior to 1.1.0.78, R6800 prior to 1.2.0.76, R6700v2 prior to 1.2.0.76, R6900v2 prior to 1.2.0.76, R7200 prior to 1.2.0.76, R7350 prior to 1.2.0.76, R7400 prior to 1.2.0.76, R7450 prior to 1.2.0.76, AC2100 prior to 1.2.0.76, AC2400 prior to 1.2.0.76, and AC2600 prior to 1.2.0.76
Trust: 1.71
AFFECTED PRODUCTS
| vendor: | netgear | model: | r6900v2 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6120 | scope: | lt | version: | 1.0.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | ac2400 | scope: | eq | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | ac2100 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r7400 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6330 | scope: | lt | version: | 1.1.0.78 | Trust: 1.0 |
| vendor: | netgear | model: | r7350 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6350 | scope: | lt | version: | 1.1.0.78 | Trust: 1.0 |
| vendor: | netgear | model: | ac2600 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r7450 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6700v2 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6850 | scope: | lt | version: | 1.1.0.78 | Trust: 1.0 |
| vendor: | netgear | model: | r6800 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r7200 | scope: | lt | version: | 1.2.0.76 | Trust: 1.0 |
| vendor: | netgear | model: | r6260 | scope: | lt | version: | 1.1.0.78 | Trust: 1.0 |
| vendor: | ネットギア | model: | r6350 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6700v2 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6900v2 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r7350 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6260 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6800 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6120 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r7200 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6850 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6330 | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-79 | Trust: 1.0 |
| problemtype: | Cross-site scripting (CWE-79) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
XSS
Trust: 0.6
PATCH
| title: | Security Advisory for Stored Cross Site Scripting on Some Routers, PSV-2020-0128 | url: | https://kb.netgear.com/000064116/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2020-0128 | Trust: 0.8 |
| title: | Netgear NETGEAR Security vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=177028 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-45675 | Trust: 3.3 |
| db: | JVNDB | id: | JVNDB-2021-017019 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202112-2471 | Trust: 0.6 |
| db: | VULMON | id: | CVE-2021-45675 | Trust: 0.1 |
REFERENCES
| url: | https://kb.netgear.com/000064116/security-advisory-for-stored-cross-site-scripting-on-some-routers-psv-2020-0128 | Trust: 1.7 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-45675 | Trust: 1.4 |
| url: | https://cwe.mitre.org/data/definitions/79.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | VULMON | id: | CVE-2021-45675 |
| db: | JVNDB | id: | JVNDB-2021-017019 |
| db: | CNNVD | id: | CNNVD-202112-2471 |
| db: | NVD | id: | CVE-2021-45675 |
LAST UPDATE DATE
2024-11-23T22:15:58.722000+00:00
SOURCES UPDATE DATE
| db: | VULMON | id: | CVE-2021-45675 | date: | 2022-01-05T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-017019 | date: | 2022-12-27T08:48:00 |
| db: | CNNVD | id: | CNNVD-202112-2471 | date: | 2022-01-06T00:00:00 |
| db: | NVD | id: | CVE-2021-45675 | date: | 2024-11-21T06:32:51.277 |
SOURCES RELEASE DATE
| db: | VULMON | id: | CVE-2021-45675 | date: | 2021-12-26T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-017019 | date: | 2022-12-27T00:00:00 |
| db: | CNNVD | id: | CNNVD-202112-2471 | date: | 2021-12-26T00:00:00 |
| db: | NVD | id: | CVE-2021-45675 | date: | 2021-12-26T01:15:21.240 |