Vulnerability in Netgear Rbk20
CVE-2021-45661
Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 before 2.5.1.16, and RBS50Y before 2.6.1.40.
EPSS: 0.003 (23.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-45661?
- CVE-2021-45661 is a high-severity vulnerability in Netgear Rbk20, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.1/10. Published 2021-12-26.
- How severe is CVE-2021-45661?
- High severity. CVSS v3 base score is 7.1 out of 10.