PT-2021-5843 · NetGear · Netgear Rbr50+1

Published 2021-12-26 · Updated 2022-01-04 · CVE-2021-45651

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR RBR50 versions prior to 2.7.3.22 NETGEAR RBS50 versions prior to 2.7.3.22 NETGEAR RBK50 versions prior to 2.7.3.22

Description The issue is related to the disclosure of sensitive information in certain NETGEAR devices. Exploitation of this issue may allow an attacker to execute arbitrary commands and access sensitive information.

Recommendations For NETGEAR RBR50 versions prior to 2.7.3.22, update to version 2.7.3.22 or later. For NETGEAR RBS50 versions prior to 2.7.3.22, update to version 2.7.3.22 or later. For NETGEAR RBK50 versions prior to 2.7.3.22, update to version 2.7.3.22 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2022-00358

CVE-2021-45651

Affected Products

Netgear Rbr50

Netgear Rbs50

References · 4

• https://kb.netgear.com/000064441/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-WiFi-Systems-PSV-2017-3085 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00358 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45651 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45651 · Security Note