1. Home
  2. CVE Database
  3. CVE-2021-45647
MEDIUM · 6.5

CVE-2021-45647

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0.1.104, R6120 before 1.0.0.76, R6220 before 1.1.0.110, R6230 before 1....

Vulnerability Description

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0.1.104, R6120 before 1.0.0.76, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.78, R6850 before 1.1.0.78, R6350 before 1.1.0.78, R6330 before 1.1.0.78, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6700v2 before 1.2.0.76, R7000 before 1.0.11.116, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7200 before 1.2.0.76, R7350 before 1.2.0.76, R7400 before 1.2.0.76, R7450 before 1.2.0.76, AC2100 before 1.2.0.76, AC2400 before 1.2.0.76, AC2600 before 1.2.0.76, R7900 before 1.0.4.38, R7960P before 1.4.1.66, R8000 before 1.0.4.68, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.72, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
NetgearEax80 Firmware< 1.0.1.62
NetgearEax80-
NetgearEx7000 Firmware< 1.0.1.104
NetgearEx7000-
NetgearR6120 Firmware< 1.0.0.76
NetgearR6120-
NetgearR6220 Firmware1.1.0.110
NetgearR6220-
NetgearR6230 Firmware< 1.1.0.110
NetgearR6230-
NetgearR6260 Firmware< 1.1.0.78
NetgearR6260-
NetgearR6850 Firmware< 1.1.0.78
NetgearR6850-
NetgearR6350 Firmware< 1.1.0.78
NetgearR6350-
NetgearR6330 Firmware< 1.1.0.78
NetgearR6330-
NetgearR6800 Firmware< 1.2.0.76
NetgearR6800-

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2021-45647?

CVE-2021-45647 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000 before 1.0.1.104, R6120 before 1.0.0.76, R6220 before 1.1.0.110, R6230 before 1....

How severe is CVE-2021-45647?

CVE-2021-45647 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-45647?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Eax80 Firmware, Netgear Eax80, Netgear Ex7000 Firmware, Netgear Ex7000, Netgear R6120 Firmware.