PT-2021-5950 · NetGear · Ex6120+50

Published

2021-09-24

·

Updated

2022-01-12

·

CVE-2021-45640

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.72 NETGEAR D6000 versions prior to 1.0.0.72 NETGEAR D6200 versions prior to 1.1.00.34 NETGEAR D6220 versions prior to 1.0.0.52 NETGEAR D6400 versions prior to 1.0.0.86 NETGEAR D7000 versions prior to 1.0.1.74 NETGEAR D7000v2 versions prior to 1.0.0.53 NETGEAR D7800 versions prior to 1.0.1.56 NETGEAR D8500 versions prior to 1.0.3.44 NETGEAR DC112A versions prior to 1.0.0.42 NETGEAR DGN2200v4 versions prior to 1.0.0.110 NETGEAR DGND2200Bv4 versions prior to 1.0.0.109 NETGEAR DM200 versions prior to 1.0.0.61 NETGEAR EX3700 versions prior to 1.0.0.76 NETGEAR EX3800 versions prior to 1.0.0.76 NETGEAR EX6120 versions prior to 1.0.0.46 NETGEAR EX6130 versions prior to 1.0.0.28 NETGEAR EX7000 versions prior to 1.0.1.78 NETGEAR PR2000 versions prior to 1.0.0.28 NETGEAR R6220 versions prior to 1.1.0.100 NETGEAR R6230 versions prior to 1.1.0.100 NETGEAR R6250 versions prior to 1.0.4.34 NETGEAR R6300v2 versions prior to 1.0.4.34 NETGEAR R6400 versions prior to 1.0.1.46 NETGEAR R6400v2 versions prior to 1.0.2.66 NETGEAR R6700 versions prior to 1.0.2.6 NETGEAR R6700v3 versions prior to 1.0.2.66 NETGEAR R6900 versions prior to 1.0.2.6 NETGEAR R7000 versions prior to 1.0.9.34 NETGEAR R7100LG versions prior to 1.0.0.50 NETGEAR R7500v2 versions prior to 1.0.3.40 NETGEAR R7900P versions prior to 1.4.1.50 NETGEAR R8000P versions prior to 1.4.1.50 NETGEAR R8900 versions prior to 1.0.4.12 NETGEAR R9000 versions prior to 1.0.4.12 NETGEAR RBK20 versions prior to 2.3.0.28 NETGEAR RBK40 versions prior to 2.3.0.28 NETGEAR RBK50 versions prior to 2.3.0.32 NETGEAR RBR20 versions prior to 2.3.0.28 NETGEAR RBR40 versions prior to 2.3.0.28 NETGEAR RBR50 versions prior to 2.3.0.32 NETGEAR RBS20 versions prior to 2.3.0.28 NETGEAR RBS40 versions prior to 2.3.0.28 NETGEAR RBS50 versions prior to 2.3.0.32 NETGEAR WN3000RPv2 versions prior to 1.0.0.78 NETGEAR WNDR3400v3 versions prior to 1.0.1.24 NETGEAR WNR2000v5 versions prior to 1.0.0.70 NETGEAR WNR2020 versions prior to 1.1.0.62 NETGEAR WNR3500Lv2 versions prior to 1.2.0.62 NETGEAR XR450 versions prior to 2.3.2.56 NETGEAR XR500 versions prior to 2.3.2.56
Description The issue is related to incorrect configuration of security settings in certain NETGEAR devices, which can be exploited by a remote attacker to impact the integrity, availability, and confidentiality of protected information.
Recommendations Update NETGEAR D3600 to version 1.0.0.72 or later Update NETGEAR D6000 to version 1.0.0.72 or later Update NETGEAR D6200 to version 1.1.00.34 or later Update NETGEAR D6220 to version 1.0.0.52 or later Update NETGEAR D6400 to version 1.0.0.86 or later Update NETGEAR D7000 to version 1.0.1.74 or later Update NETGEAR D7000v2 to version 1.0.0.53 or later Update NETGEAR D7800 to version 1.0.1.56 or later Update NETGEAR D8500 to version 1.0.3.44 or later Update NETGEAR DC112A to version 1.0.0.42 or later Update NETGEAR DGN2200v4 to version 1.0.0.110 or later Update NETGEAR DGND2200Bv4 to version 1.0.0.109 or later Update NETGEAR DM200 to version 1.0.0.61 or later Update NETGEAR EX3700 to version 1.0.0.76 or later Update NETGEAR EX3800 to version 1.0.0.76 or later Update NETGEAR EX6120 to version 1.0.0.46 or later Update NETGEAR EX6130 to version 1.0.0.28 or later Update NETGEAR EX7000 to version 1.0.1.78 or later Update NETGEAR PR2000 to version 1.0.0.28 or later Update NETGEAR R6220 to version 1.1.0.100 or later Update NETGEAR R6230 to version 1.1.0.100 or later Update NETGEAR R6250 to version 1.0.4.34 or later Update NETGEAR R6300v2 to version 1.0.4.34 or later Update NETGEAR R6400 to version 1.0.1.46 or later Update NETGEAR R6400v2 to version 1.0.2.66 or later Update NETGEAR R6700 to version 1.0.2.6 or later Update NETGEAR R6700v3 to version 1.0.2.66 or later Update NETGEAR R6900 to version 1.0.2.6 or later Update NETGEAR R7000 to version 1.0.9.34 or later Update NETGEAR R7100LG to version 1.0.0.50 or later Update NETGEAR R7500v2 to version 1.0.3.40 or later Update NETGEAR R7900P to version 1.4.1.50 or later Update NETGEAR R8000P to version 1.4.1.50 or later Update NETGEAR R8900 to version 1.0.4.12 or later Update NETGEAR R9000 to version 1.0.4.12 or later Update NETGEAR RBK20 to version 2.3.0.28 or later Update NETGEAR RBK40 to version 2.3.0.28 or later Update NETGEAR RBK50 to version 2.3.0.32 or later Update NETGEAR RBR20 to version 2.3.0.28 or later Update NETGEAR RBR40 to version 2.3.0.28 or later Update NETGEAR RBR50 to version 2.3.0.32 or later Update NETGEAR RBS20 to version 2.3.0.28 or later Update NETGEAR RBS40 to version 2.3.0.28 or later Update NETGEAR RBS50 to version 2.3.0.32 or later Update NETGEAR WN3000RPv2 to version 1.0.0.78 or later Update NETGEAR WNDR3400v3 to version 1.0.1.24 or later Update NETGEAR WNR2000v5 to version 1.0.0.70 or later Update NETGEAR WNR2020 to version 1.1.0.62 or later Update NETGEAR WNR3500Lv2 to version 1.2.0.62 or later Update NETGEAR XR450 to version 2.3.2.56 or later Update NETGEAR XR500 to version 2.3.2.56 or later

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2022-00465
CVE-2021-45640

Affected Products

D3600
D6000
D6200
D6220
D6400
D7000
D7000V2
D7800
D8500
Dc112A
Dgn2200V4
Dgnd2200Bv4
Dm200
Ex3700
Ex3800
Ex6120
Ex6130
Ex7000
Pr2000
R6220
R6230
R6250
R6300V2
R6400
R6400V2
R6700
R6700V3
R6900
R7000
R7100Lg
R7500V2
R7900P
R8000P
R8900
R9000
Rbk20
Rbk40
Rbk50
Rbr20
Rbr40
Rbr50
Rbs20
Rbs40
Rbs50
Wn3000Rpv2
Wndr3400V3
Wnr2000V5
Wnr2020
Wnr3500Lv2
Xr450
Xr500