Sensitive Information Disclosure in NETGEAR Routers
CVE-2021-45649

7.9HIGH

Key Information:

Vendor
Netgear
Status
R6400v2 Firmware
Vendor
CVE Published:
26 December 2021

Summary

Certain NETGEAR routers are susceptible to a vulnerability that allows attackers to gain access to sensitive information. This issue affects specific models including R6400v2, R6700v3, R7000, R6900P, and R7000P if they are running below designated firmware versions. Users are encouraged to upgrade their devices to the latest firmware to mitigate the potential risks associated with this vulnerability.

References

https://kb.netgear.com/000064073/Security-Advisory-for-Se...
x_refsource_MISC

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.