CRITICAL · 9.6

CVE-2021-45652

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.

Vulnerability Description

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.

CVSS Score

9.6

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearRbk352 Firmware< 4.4.0.10
NetgearRbk352-
NetgearRbr350 Firmware< 4.4.0.10
NetgearRbr350-
NetgearRbs350 Firmware< 4.4.0.10
NetgearRbs350-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-45652?

CVE-2021-45652 is a vulnerability with a CVSS score of 9.6 (CRITICAL). Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.

How severe is CVE-2021-45652?

CVE-2021-45652 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-45652?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Rbk352 Firmware, Netgear Rbk352, Netgear Rbr350 Firmware, Netgear Rbr350, Netgear Rbs350 Firmware.