Sensitive Information Disclosure in NETGEAR R7000 Devices
CVE-2021-45646

5.3MEDIUM

Key Information:

Vendor
Netgear
Status
R7000 Firmware
Vendor
CVE Published:
26 December 2021

Summary

NETGEAR R7000 devices that have not been updated to version 1.0.11.116 are susceptible to a vulnerability that permits unauthorized access to sensitive information. This exposure can potentially lead to data breaches or further exploitation if not addressed promptly. Users are recommended to update their firmware to mitigate the risk and protect sensitive data.

References

https://kb.netgear.com/000064473/Security-Advisory-for-Se...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.