CVE-2021-45671

Certain NETGEAR devices are affected by stored XSS

Medium · published December 26, 2021

CVSS v3.1
6.5
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.62, EX7500 before 1.0.0.72, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.4.120, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.4.120, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.4.120, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:A/A:L/C:L/I:H/PR:H/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.5th percentile
Published
2021-12-26T00:25Z
EPSS history
Timeline
  • 26 DEC 00:25Z
    Certain NETGEAR devices are affected by stored XSS
    cvelistv5