PT-2021-6167 · NetGear · Netgear Rbk352+1

Published 2021-09-26 · Updated 2024-02-05 · CVE-2021-45653

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR RBK352 versions prior to 4.4.0.10 NETGEAR RBR350 versions prior to 4.4.0.10 NETGEAR RBS350 versions prior to 4.4.0.10

Description The issue is related to the lack of protection for service data in the embedded software of NETGEAR routers. Exploitation of this issue may allow a remote attacker to disclose protected information.

Recommendations For NETGEAR RBK352 versions prior to 4.4.0.10, update to version 4.4.0.10 or later. For NETGEAR RBR350 versions prior to 4.4.0.10, update to version 4.4.0.10 or later. For NETGEAR RBS350 versions prior to 4.4.0.10, update to version 4.4.0.10 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2022-01083

CVE-2021-45653

Affected Products

Netgear Rbk352

Netgear Rbr350

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-45653 · Security Note
• https://kb.netgear.com/000064163/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-WiFi-Systems-PSV-2021-0047 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01083 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45653 · Vendor Advisory
• https://t.me/aptreports/7743 · Telegram Post