Sign-up

ID

VAR-202112-2290


CVE

CVE-2021-45659


TITLE

plural  NETGEAR  Device Injection Vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2021-017034

DESCRIPTION

Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 before 2.5.1.16, and RBS50Y before 2.6.1.40. plural NETGEAR The device has an injection vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. This affects RBK40 prior to 2.5.1.16, RBR40 prior to 2.5.1.16, RBS40 prior to 2.5.1.16, RBK20 prior to 2.5.1.16, RBR20 prior to 2.5.1.16, RBS20 prior to 2.5.1.16, RBK50 prior to 2.5.1.16, RBR50 prior to 2.5.1.16, RBS50 prior to 2.5.1.16, and RBS50Y prior to 2.6.1.40

Trust: 1.71

sources: NVD: CVE-2021-45659 // JVNDB: JVNDB-2021-017034 // VULMON: CVE-2021-45659

AFFECTED PRODUCTS

vendor:netgearmodel:rbs50yscope:ltversion:2.6.1.40

Trust: 1.0

vendor:netgearmodel:rbr50scope:ltversion:2.5.1.16

Trust: 1.0

vendor:netgearmodel:rbr40scope:ltversion:2.5.1.16

Trust: 1.0

vendor:netgearmodel:rbk40scope:ltversion:2.5.1.16

Trust: 1.0

vendor:netgearmodel:rbs40scope:ltversion:2.5.1.16

Trust: 1.0

vendor:netgearmodel:rbk20scope:ltversion:2.5.1.16

Trust: 1.0

vendor:netgearmodel:rbk50scope:ltversion:2.5.1.16

Trust: 1.0

vendor:netgearmodel:rbs20scope:ltversion:2.5.1.16

Trust: 1.0

vendor:netgearmodel:rbs50scope:ltversion:2.5.1.16

Trust: 1.0

vendor:netgearmodel:rbr20scope:ltversion:2.5.1.16

Trust: 1.0

vendor:ネットギアmodel:rbs50scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbs20scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbr20scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbr50scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbs40scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbk40scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbr40scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbk20scope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbs50yscope: - version: -

Trust: 0.8

vendor:ネットギアmodel:rbk50scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2021-017034 // NVD: CVE-2021-45659

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-45659
value: HIGH

Trust: 1.0

cve@mitre.org: CVE-2021-45659
value: HIGH

Trust: 1.0

NVD: CVE-2021-45659
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202112-2455
value: HIGH

Trust: 0.6

VULMON: CVE-2021-45659
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2021-45659
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

nvd@nist.gov: CVE-2021-45659
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

cve@mitre.org: CVE-2021-45659
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
exploitabilityScore: 1.8
impactScore: 5.2
version: 3.1

Trust: 1.0

NVD: CVE-2021-45659
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULMON: CVE-2021-45659 // JVNDB: JVNDB-2021-017034 // CNNVD: CNNVD-202112-2455 // NVD: CVE-2021-45659 // NVD: CVE-2021-45659

PROBLEMTYPE DATA

problemtype:CWE-74

Trust: 1.0

problemtype:injection (CWE-74) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2021-017034 // NVD: CVE-2021-45659

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202112-2455

TYPE

injection

Trust: 0.6

sources: CNNVD: CNNVD-202112-2455

PATCH

title:Security Advisory for Server Side Injection on Some WiFi Systems, PSV-2019-0126url:https://kb.netgear.com/000064063/Security-Advisory-for-Server-Side-Injection-on-Some-WiFi-Systems-PSV-2019-0126

Trust: 0.8

title:Netgear NETGEAR Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=176217

Trust: 0.6

sources: JVNDB: JVNDB-2021-017034 // CNNVD: CNNVD-202112-2455

EXTERNAL IDS

db:NVDid:CVE-2021-45659

Trust: 3.3

db:JVNDBid:JVNDB-2021-017034

Trust: 0.8

db:CNNVDid:CNNVD-202112-2455

Trust: 0.6

db:VULMONid:CVE-2021-45659

Trust: 0.1

sources: VULMON: CVE-2021-45659 // JVNDB: JVNDB-2021-017034 // CNNVD: CNNVD-202112-2455 // NVD: CVE-2021-45659

REFERENCES

url:https://kb.netgear.com/000064063/security-advisory-for-server-side-injection-on-some-wifi-systems-psv-2019-0126

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2021-45659

Trust: 0.8

url:https://cwe.mitre.org/data/definitions/94.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2021-45659 // JVNDB: JVNDB-2021-017034 // CNNVD: CNNVD-202112-2455 // NVD: CVE-2021-45659

SOURCES

db:VULMONid:CVE-2021-45659
db:JVNDBid:JVNDB-2021-017034
db:CNNVDid:CNNVD-202112-2455
db:NVDid:CVE-2021-45659

LAST UPDATE DATE

2024-11-23T22:32:58.529000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2021-45659date:2022-01-05T00:00:00
db:JVNDBid:JVNDB-2021-017034date:2022-12-28T02:11:00
db:CNNVDid:CNNVD-202112-2455date:2022-07-14T00:00:00
db:NVDid:CVE-2021-45659date:2024-11-21T06:32:48.603

SOURCES RELEASE DATE

db:VULMONid:CVE-2021-45659date:2021-12-26T00:00:00
db:JVNDBid:JVNDB-2021-017034date:2022-12-28T00:00:00
db:CNNVDid:CNNVD-202112-2455date:2021-12-26T00:00:00
db:NVDid:CVE-2021-45659date:2021-12-26T01:15:20.510