2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2021-45669" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2021-12-26T01:15:20.960" ,
2024-11-23 15:12:23 +00:00
"lastModified" : "2024-11-21T06:32:50.190" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6."
} ,
{
"lang" : "es" ,
"value" : "Determinados dispositivos NETGEAR est\u00e1n afectados por un ataque de tipo XSS almacenado. Esto afecta a RAX200 versiones anteriores a 1.0.3.106, al MR60 versiones anteriores a 1.0.6.110, a RAX20 versiones anteriores a 1.0.2.82, a RAX45 versiones anteriores a 1.0.2.72, a RAX80 versiones anteriores a 1.0.3.106, al MS60 versiones anteriores a 1.0.6.110, a RAX15 versiones anteriores a 1.0.2.82, a RAX50 versiones anteriores a 1.0.2.72, a RBK752 versiones anteriores a 3.2.16.6 y a RBK852 versiones anteriores a 3.2.16.6. 0.2.72, RAX75 versiones anteriores a 1.0.3.106, RBR750 versiones anteriores a 3.2.16.6, RBR850 versiones anteriores a 3.2.16.6, RBS750 versiones anteriores a 3.2.16.6, RBS850 versiones anteriores a 3.2.16.6, RBK752 versiones anteriores a 3.2.16.6 y RBK852 versiones anteriores a 3.2.16.6."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
2024-11-23 15:12:23 +00:00
"source" : "cve@mitre.org" ,
"type" : "Secondary" ,
2023-04-24 12:24:31 +02:00
"cvssData" : {
"version" : "3.1" ,
2024-11-23 15:12:23 +00:00
"vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N" ,
"baseScore" : 3.7 ,
"baseSeverity" : "LOW" ,
"attackVector" : "ADJACENT_NETWORK" ,
"attackComplexity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"privilegesRequired" : "HIGH" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-11-23 15:12:23 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
2024-11-23 15:12:23 +00:00
"exploitabilityScore" : 0.7 ,
2023-04-24 12:24:31 +02:00
"impactScore" : 2.7
} ,
{
2024-11-23 15:12:23 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2023-04-24 12:24:31 +02:00
"cvssData" : {
"version" : "3.1" ,
2024-11-23 15:12:23 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" ,
"baseScore" : 4.8 ,
"baseSeverity" : "MEDIUM" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
2023-04-24 12:24:31 +02:00
"privilegesRequired" : "HIGH" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-11-23 15:12:23 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
2024-11-23 15:12:23 +00:00
"exploitabilityScore" : 1.7 ,
2023-04-24 12:24:31 +02:00
"impactScore" : 2.7
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N" ,
2024-11-23 15:12:23 +00:00
"baseScore" : 3.5 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-11-23 15:12:23 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "LOW" ,
"exploitabilityScore" : 6.8 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-79"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.3.106" ,
"matchCriteriaId" : "04513F08-329D-446F-A356-29074C1C0BEA"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "58EB0F2F-FB5C-47D9-9AE6-087AE517B3F9"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.6.110" ,
"matchCriteriaId" : "6F1EBAB4-F713-4AC5-AECC-9E9D61FF3576"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "65BB3ECD-2F0B-4625-A1DB-F6CEFC46E277"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.2.82" ,
"matchCriteriaId" : "93EF1D39-E084-40E9-86CF-C590763841A0"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7038703C-C79D-4DD4-8B16-E1A5FC6694C0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.2.72" ,
"matchCriteriaId" : "7932C371-669C-43C0-94A4-17BD4BDE8C74"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B08BD69-CDCC-4CEB-B887-4E47D2B45D26"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.3.106" ,
"matchCriteriaId" : "34D7AF28-F117-4E31-AED8-A3179B1BE182"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "06B5A85C-3588-4263-B9AD-4E56D3F6CB16"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.6.110" ,
"matchCriteriaId" : "9E445DBA-2B45-410C-9288-1A4472452CE1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F003F064-591C-4D7C-9EC4-D0E553BC6683"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.2.82" ,
"matchCriteriaId" : "ED73C5EC-C8D3-4206-BCAA-0901F786DD98"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B624B4D3-BCF4-4F95-B401-A88BEC3145A5"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.2.72" ,
"matchCriteriaId" : "D8B99059-161F-42D4-8AD8-478ABB7DE4B6"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C430976E-24C0-4EA7-BF54-F9C188AB9C01"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.0.3.106" ,
"matchCriteriaId" : "C0318AD0-52A7-490F-94C1-D07C97370D2C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1BAA74D7-36A1-4494-96A2-BD0D2D6BF22F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.2.16.6" ,
"matchCriteriaId" : "05A46FA9-5DC8-4408-B4C2-AD5F1CABE7C1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.2.16.6" ,
"matchCriteriaId" : "FE13548D-0A26-45C1-8424-D4705EB105EA"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.2.16.6" ,
"matchCriteriaId" : "2C144D71-6C10-44CD-BFF9-907A92F0432C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.2.16.6" ,
"matchCriteriaId" : "041D94DE-78C9-475C-9FAE-0B081C69B55F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.2.16.6" ,
"matchCriteriaId" : "FDD03FFF-ECAF-4527-A195-559DF479A0F2"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A45832BD-114D-42F1-B9F1-7532496D30A6"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.2.16.6" ,
"matchCriteriaId" : "B66A716A-7EC5-4F9B-853A-36C0D1AA3BFE"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://kb.netgear.com/000064478/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-WiFi-Systems-PSV-2020-0210" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
2024-11-23 15:12:23 +00:00
} ,
{
"url" : "https://kb.netgear.com/000064478/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-WiFi-Systems-PSV-2020-0210" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}