Vulnerability Description
Certain NETGEAR devices are affected by CSRF. This affects EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, and EX6130 before 1.0.0.44.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Ex3700 Firmware | < 1.0.0.90 |
| Netgear | Ex3700 | - |
| Netgear | Ex3800 Firmware | < 1.0.0.90 |
| Netgear | Ex3800 | - |
| Netgear | Ex6120 Firmware | < 1.0.0.64 |
| Netgear | Ex6120 | - |
| Netgear | Ex6130 Firmware | < 1.0.0.44 |
| Netgear | Ex6130 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000063883/Security-Advisory-for-Cross-Site-Request-ForgerVendor Advisory
- https://kb.netgear.com/000063883/Security-Advisory-for-Cross-Site-Request-ForgerVendor Advisory
FAQ
What is CVE-2021-32122?
CVE-2021-32122 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Certain NETGEAR devices are affected by CSRF. This affects EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, and EX6130 before 1.0.0.44.
How severe is CVE-2021-32122?
CVE-2021-32122 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-32122?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Ex3700 Firmware, Netgear Ex3700, Netgear Ex3800 Firmware, Netgear Ex3800, Netgear Ex6120 Firmware.