CVE-2021-45644 : Certain NETGEAR devices are affected by incorrect configuration of security sett

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC2600 before 1.2.0.88, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 before 1.2.0.88, R6800 before 1.2.0.88, R6850 before 1.1.0.84, R6900v2 before 1.2.0.88, R7200 before 1.2.0.88, R7350 before 1.2.0.88, R7400 before 1.2.0.88, and R7450 before 1.2.0.88.

Published 2021-12-26 01:15:20

Updated 2022-01-10 20:31:21

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2021-45644

Netgear » R6220 Firmware
Versions before (<) 1.1.0.110
cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6220 » Version: N/A
Netgear » R6800 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6800 » Version: N/A
Netgear » R6230 Firmware
Versions before (<) 1.1.0.110
cpe:2.3:o:netgear:r6230_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6230 » Version: N/A
Netgear » R6260 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6260 » Version: N/A
Netgear » R6850 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6850_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6850 » Version: N/A
Netgear » R6350 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6350 » Version: N/A
Netgear » R6330 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6330 » Version: N/A
Netgear » R7200 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r7200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7200 » Version: N/A
Netgear » R7350 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r7350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7350 » Version: N/A
Netgear » R7400 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r7400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7400 » Version: N/A
Netgear » R7450 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r7450_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7450 » Version: N/A
Netgear » Ac2100 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:ac2100_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Ac2100 » Version: N/A
Netgear » Ac2400 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:ac2400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Ac2400 » Version: N/A
Netgear » Ac2600 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:ac2600_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Ac2600 » Version: N/A
Netgear » R6700v2 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r6700v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6700v2 » Version: N/A
Netgear » R6900v2 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r6900v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6900v2 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-45644

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-45644

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
6.8	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.9	5.9	MITRE
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2021-45644

https://kb.netgear.com/000064162/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2021-0046

Security Advisory for Security Misconfiguration on Some Routers, PSV-2021-0046 | Answer | NETGEAR Support
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-45644

Products affected by CVE-2021-45644

Exploit prediction scoring system (EPSS) score for CVE-2021-45644

CVSS scores for CVE-2021-45644

References for CVE-2021-45644