CVE & CISA-KEV Catalog

CVE-2021-45642

HIGH
7.5
CVSS v3
NVD

Description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.64, EX6250 before 1.0.0.134, EX7700 before 1.0.0.222, LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, R8900 before 1.0.5.26, R9000 before 1.0.5.26, XR450 before 2.3.2.66, XR500 before 2.3.2.66, XR700 before 1.0.1.36, EX7320 before 1.0.0.134, RAX120 before 1.2.2.24, EX7300v2 before 1.0.0.134, RAX120v2 before 1.2.2.24, EX6410 before 1.0.0.134, RBR10 before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, EX6420 before 1.0.0.134, RBS10 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, EX6400v2 before 1.0.0.134, RBK12 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22.

How to fix

Remediation Available
d7800 firmwareNVD
Affected:< 1.0.1.64Fixed in:1.0.1.64CVE-2021-45642derived from NVD
ex6250 firmwareNVD
Affected:< 1.0.0.134Fixed in:1.0.0.134CVE-2021-45642derived from NVD
ex6400v2 firmwareNVD
Affected:< 1.0.0.134Fixed in:1.0.0.134CVE-2021-45642derived from NVD
ex6410 firmwareNVD
Affected:< 1.0.0.134Fixed in:1.0.0.134CVE-2021-45642derived from NVD
ex6420 firmwareNVD
Affected:< 1.0.0.134Fixed in:1.0.0.134CVE-2021-45642derived from NVD
ex7300v2 firmwareNVD
Affected:< 1.0.0.134Fixed in:1.0.0.134CVE-2021-45642derived from NVD
ex7320 firmwareNVD
Affected:< 1.0.0.134Fixed in:1.0.0.134CVE-2021-45642derived from NVD
ex7700 firmwareNVD
Affected:< 1.0.0.222Fixed in:1.0.0.222CVE-2021-45642derived from NVD
lbr20 firmwareNVD
Affected:< 2.6.3.50Fixed in:2.6.3.50CVE-2021-45642derived from NVD
r8900 firmwareNVD
Affected:< 1.0.5.26Fixed in:1.0.5.26CVE-2021-45642derived from NVD
r9000 firmwareNVD
Affected:< 1.0.5.26Fixed in:1.0.5.26CVE-2021-45642derived from NVD
rax120 firmwareNVD
Affected:< 1.2.2.24Fixed in:1.2.2.24CVE-2021-45642derived from NVD
rax120v2 firmwareNVD
Affected:< 1.2.2.24Fixed in:1.2.2.24CVE-2021-45642derived from NVD
rbk12 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbk20 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbk40 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbk50 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbr10 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbr20 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbr40 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbr50 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbs10 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbs20 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbs40 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbs50 firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
rbs50y firmwareNVD
Affected:< 2.7.3.22Fixed in:2.7.3.22CVE-2021-45642derived from NVD
xr450 firmwareNVD
Affected:< 2.3.2.66Fixed in:2.3.2.66CVE-2021-45642derived from NVD
xr500 firmwareNVD
Affected:< 2.3.2.66Fixed in:2.3.2.66CVE-2021-45642derived from NVD
xr700 firmwareNVD
Affected:< 1.0.1.36Fixed in:1.0.1.36CVE-2021-45642derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorAdjacent
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeChanged

Impact

ConfidentialityLow
IntegrityHigh
AvailabilityLow

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L

Exploit Intelligence

0.94%probability of exploitation in 30 days
57thpercentile

Moderate risk: more likely to be exploited than 57% of all known CVEs.

References

Embed a live status badge for CVE-2021-45642
CVE-2021-45642 severity badge

Markdown

[![CVE-2021-45642](https://tridentstack.com/cve/badge/CVE-2021-45642.svg)](https://tridentstack.com/cve/CVE-2021-45642)

HTML

<a href="https://tridentstack.com/cve/CVE-2021-45642"><img src="https://tridentstack.com/cve/badge/CVE-2021-45642.svg" alt="CVE-2021-45642"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.