CVE-2021-45650

Certain NETGEAR devices are affected by disclosure of sensitive information

Critical · published December 26, 2021

CVSS v3.1
9.1
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

🚨 A single command could expose sensitive information on certain NETGEAR devices! This vulnerability is a wake-up call for anyone using R7000, R7900, R8000, and others — patch up before it’s too late! 🔥 Think of it like a spy sneaking into a secure office and rummaging through confidential files that shouldn’t be accessible — without even needing a badge! The flaw here leaves your device open to anyone curious enough to ask the right questions. An attacker could potentially gain access to sensitive information, which would be absolutely devastating! This could lead to unauthorized access to network configurations or even user data, leaving your home network vulnerable to further exploits. Don’t let your devices become open books!

Put simply

Think of it like a spy sneaking into a secure office and rummaging through confidential files that shouldn’t be accessible — without even needing a badge! The flaw here leaves your device open to anyone curious enough to ask the right questions. This vulnerability allows unauthorized disclosure of sensitive information due to improper input validation in certain NETGEAR devices, specifically affecting various firmware versions across models like R7000, R7900, R8000, and more.

What to do

An attacker could potentially gain access to sensitive information, which would be absolutely devastating! This could lead to unauthorized access to network configurations or even user data, leaving your home network vulnerable to further exploits. Don’t let your devices become open books! Update affected NETGEAR devices immediately to the specified patched versions: R7000 to 1.0.11.110, R7900 to 1.0.4.30, R8000 to 1.0.4.62, and others as listed. Regularly check for firmware updates to ensure your devices remain secure. You've got this! Follow these steps and you’ll have your devices locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01081 · 64.9th percentile
Published
2021-12-26T00:29Z
EPSS history
Timeline
  • 26 DEC 00:29Z
    Certain NETGEAR devices are affected by disclosure of sensitive information
    cvelistv5