CVE-2021-45654

NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information

Critical · published December 26, 2021

CVSS v3.1
9.6
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

🚨 Sensitive information could be exposed if you're running an older version of the NETGEAR XR1000 — it’s like leaving your house key under the mat for anyone to find! 🔥 Think of your XR1000 as a vault for your digital life, but it has a tiny crack in the wall — like a package being delivered to the wrong address because the label was misread. Anyone can peek inside! This vulnerability could allow attackers to access sensitive information stored on the device — imagine a thief rifling through your private documents! If left unaddressed, they could exploit this exposure for identity theft or other malicious actions. It's absolutely devastating if your data gets into the wrong hands!

Put simply

Think of your XR1000 as a vault for your digital life, but it has a tiny crack in the wall — like a package being delivered to the wrong address because the label was misread. Anyone can peek inside! CVE-2021-45654 is a vulnerability in NETGEAR XR1000 devices prior to version 1.0.0.58 that allows unauthorized disclosure of sensitive information, potentially enabling attackers to gain access to internal device data.

What to do

This vulnerability could allow attackers to access sensitive information stored on the device — imagine a thief rifling through your private documents! If left unaddressed, they could exploit this exposure for identity theft or other malicious actions. It's absolutely devastating if your data gets into the wrong hands! To fix this, immediately update your NETGEAR XR1000 firmware to version 1.0.0.58 or later. Additionally, review your device configurations for any other potential exposure points. Don’t forget to change your passwords and security practices! You've got this! Follow these steps and you’ll have your network secured in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01081 · 64.9th percentile
Published
2021-12-26T00:28Z
EPSS history
Timeline
  • 26 DEC 00:28Z
    NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information
    cvelistv5