Vulnerability Details : CVE-2021-45645
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS30 before 3.2.33.108, and SRC60 before 2.7.0.122.
Products affected by CVE-2021-45645
- cpe:2.3:o:netgear:srr60_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:srs60_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:srk60_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:rbs50y_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:sxk30_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:sxr30_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:sxs30_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:src60_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-45645
0.27%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 47 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-45645
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
|
8.2
|
HIGH | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N |
2.8
|
4.7
|
MITRE | |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
References for CVE-2021-45645
-
https://kb.netgear.com/000064530/Security-Advisory-for-Security-Misconfiguration-on-Some-WiFi-Systems-PSV-2021-0127
Security Advisory for Security Misconfiguration on Some WiFi Systems, PSV-2021-0127 | Answer | NETGEAR SupportPatch;Vendor Advisory
Jump to