PT-2021-5841 · NetGear · Netgear Xr1000+2

Published 2021-12-26 · Updated 2022-01-05 · CVE-2021-45643

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AC:L/AV:A/A:N/C:H/I:L/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions NETGEAR R6400v2 versions prior to 1.0.4.118 NETGEAR R6700v3 versions prior to 1.0.4.118 NETGEAR XR1000 versions prior to 1.0.0.58

Description The issue is related to the incorrect configuration of security settings in certain NETGEAR devices, which may allow a remote attacker to bypass security mechanisms.

Recommendations For NETGEAR R6400v2 versions prior to 1.0.4.118, update to version 1.0.4.118 or later. For NETGEAR R6700v3 versions prior to 1.0.4.118, update to version 1.0.4.118 or later. For NETGEAR XR1000 versions prior to 1.0.0.58, update to version 1.0.0.58 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2022-00356

CVE-2021-45643

Affected Products

Netgear R6400V2

Netgear R6700V3

Netgear Xr1000

References · 4

• https://osv.dev/vulnerability/CVE-2021-45643 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45643 · Security Note
• https://bdu.fstec.ru/vul/2022-00356 · Security Note
• https://kb.netgear.com/000064159/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2021-0035 · Vendor Advisory