PT-2021-6176 · NetGear · Netgear Rbk352+1

Published 2021-09-26 · Updated 2022-01-04 · CVE-2021-45652

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions NETGEAR RBK352 versions prior to 4.4.0.10 NETGEAR RBR350 versions prior to 4.4.0.10 NETGEAR RBS350 versions prior to 4.4.0.10

Description The issue is related to the disclosure of sensitive information in certain NETGEAR devices. This is due to a lack of protection for service data. Exploitation of this issue may allow a remote attacker to reveal protected information.

Recommendations For NETGEAR RBK352 versions prior to 4.4.0.10, update to version 4.4.0.10 or later. For NETGEAR RBR350 versions prior to 4.4.0.10, update to version 4.4.0.10 or later. For NETGEAR RBS350 versions prior to 4.4.0.10, update to version 4.4.0.10 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2022-01092

CVE-2021-45652

Affected Products

Netgear Rbk352

Netgear Rbr350

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-45652 · Security Note
• https://bdu.fstec.ru/vul/2022-01092 · Security Note
• https://kb.netgear.com/000064152/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-WiFi-Systems-PSV-2021-0013 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45652 · Vendor Advisory
• https://t.me/cibsecurity/34648 · Telegram Post