CVE-2021-45661

Certain NETGEAR devices are affected by server-side injection

High · published December 26, 2021

CVSS v3.1
7.1
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 before 2.5.1.16, and RBS50Y before 2.6.1.40.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:N/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.2th percentile
Published
2021-12-26T00:27Z
EPSS history
Timeline
  • 26 DEC 00:27Z
    Certain NETGEAR devices are affected by server-side injection
    cvelistv5