Vulnerability Description
A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Mbr1517 Firmware | All versions |
| Netgear | Mbr1517 | v2 |
| Netgear | Wnce3001 Firmware | All versions |
| Netgear | Wnce3001 | - |
| Netgear | Wac104 Firmware | <= 1.0.4.13 |
| Netgear | Wac104 | - |
Related Weaknesses (CWE)
References
- https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthoriExploitThird Party Advisory
- https://www.netgear.com/about/security/Vendor Advisory
- https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthoriExploitThird Party Advisory
- https://www.netgear.com/about/security/Vendor Advisory
FAQ
What is CVE-2021-44262?
CVE-2021-44262 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes...
How severe is CVE-2021-44262?
CVE-2021-44262 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-44262?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Mbr1517 Firmware, Netgear Mbr1517, Netgear Wnce3001 Firmware, Netgear Wnce3001, Netgear Wac104 Firmware.