1. Home
  2. CVE Database
  3. CVE-2021-45675
MEDIUM · 5.8

CVE-2021-45675

Certain NETGEAR devices are affected by stored XSS. This affects R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6850 before 1.1.0.78, R6350 before 1.1.0.78, R6330 before 1.1.0.78, R6800 before 1.2.0.7...

Vulnerability Description

Certain NETGEAR devices are affected by stored XSS. This affects R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6850 before 1.1.0.78, R6350 before 1.1.0.78, R6330 before 1.1.0.78, R6800 before 1.2.0.76, R6700v2 before 1.2.0.76, R6900v2 before 1.2.0.76, R7200 before 1.2.0.76, R7350 before 1.2.0.76, R7400 before 1.2.0.76, R7450 before 1.2.0.76, AC2100 before 1.2.0.76, AC2400 before 1.2.0.76, and AC2600 before 1.2.0.76.

CVSS Score

5.8

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
NetgearR6120 Firmware< 1.0.0.76
NetgearR6120-
NetgearR6260 Firmware< 1.1.0.78
NetgearR6260-
NetgearR6850 Firmware< 1.1.0.78
NetgearR6850-
NetgearR6350 Firmware< 1.1.0.78
NetgearR6350-
NetgearR6330 Firmware< 1.1.0.78
NetgearR6330-
NetgearR6800 Firmware< 1.2.0.76
NetgearR6800-
NetgearR6700V2 Firmware< 1.2.0.76
NetgearR6700V2-
NetgearR6900V2 Firmware< 1.2.0.76
NetgearR6900V2-
NetgearR7200 Firmware< 1.2.0.76
NetgearR7200-
NetgearR7350 Firmware< 1.2.0.76
NetgearR7350-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2021-45675?

CVE-2021-45675 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Certain NETGEAR devices are affected by stored XSS. This affects R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6850 before 1.1.0.78, R6350 before 1.1.0.78, R6330 before 1.1.0.78, R6800 before 1.2.0.7...

How severe is CVE-2021-45675?

CVE-2021-45675 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-45675?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear R6120 Firmware, Netgear R6120, Netgear R6260 Firmware, Netgear R6260, Netgear R6850 Firmware.