VulnerabilityModified

CVE-2021-45642

Certain NETGEAR devices are affected by incorrect configuration of security settings.

HIGH 7.2EPSS 0.94%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.94%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.64, EX6250 before 1.0.0.134, EX7700 before 1.0.0.222, LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, R8900 before 1.0.5.26, R9000 before 1.0.5.26, XR450 before 2.3.2.66, XR500 before 2.3.2.66, XR700 before 1.0.1.36, EX7320 before 1.0.0.134, RAX120 before 1.2.2.24, EX7300v2 before 1.0.0.134, RAX120v2 before 1.2.2.24, EX6410 before 1.0.0.134, RBR10 before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, EX6420 before 1.0.0.134, RBS10 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, EX6400v2 before 1.0.0.134, RBK12 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22.

CVSS 3.1: 7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.94% probability · 59th percentile
CISA KEV: Not listed
Affected: netgear/d7800 firmware · netgear/ex6250 firmware · netgear/ex7700 firmware · netgear/lbr20 firmware · netgear/rbs50y firmware · netgear/rbs50 firmware · netgear/rbs20 firmware · netgear/rbs10 firmware · netgear/rbs40 firmware · netgear/r8900 firmware · netgear/r9000 firmware · netgear/xr450 firmware · netgear/xr500 firmware · netgear/xr700 firmware · netgear/ex7320 firmware · netgear/rax120 firmware · netgear/ex7300v2 firmware · netgear/rax120v2 firmware · netgear/ex6410 firmware · netgear/ex6420 firmware · +9 more
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.