Stored Cross-Site Scripting Vulnerability in NETGEAR Routers
CVE-2021-45674

3.2LOW

Key Information:

Vendor

Netgear
Status
R7000 Firmware
Vendor
CVE Published:
26 December 2021

What is CVE-2021-45674?

Certain NETGEAR routers are susceptible to a stored Cross-Site Scripting vulnerability, allowing attackers to inject malicious scripts that can be executed in the context of the user's session. This vulnerability affects various models, including R7000, R7900, R8000, RAX15, RAX20, RAX200, RAX75, and RAX80, prior to their respective firmware versions. Successfully exploiting this vulnerability may lead to unauthorized access to sensitive information and further compromise the security of the affected devices.

References

https://kb.netgear.com/000064077/Security-Advisory-for-St...
x_refsource_MISC

CVSS V3.1

Score:
3.2
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.