Vulnerability Description
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Rbk352 Firmware | < 4.4.0.10 |
| Netgear | Rbk352 | - |
| Netgear | Rbr350 Firmware | < 4.4.0.10 |
| Netgear | Rbr350 | - |
| Netgear | Rbs350 Firmware | < 4.4.0.10 |
| Netgear | Rbs350 | - |
References
- https://kb.netgear.com/000064160/Security-Advisory-for-Arbitrary-File-Read-on-SoPatchVendor Advisory
- https://kb.netgear.com/000064160/Security-Advisory-for-Arbitrary-File-Read-on-SoPatchVendor Advisory
FAQ
What is CVE-2021-45494?
CVE-2021-45494 is a vulnerability with a CVSS score of 8.4 (HIGH). Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
How severe is CVE-2021-45494?
CVE-2021-45494 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-45494?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Rbk352 Firmware, Netgear Rbk352, Netgear Rbr350 Firmware, Netgear Rbr350, Netgear Rbs350 Firmware.