XSS in NETGEAR Cbr40
CVE-2021-45666
Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, RBW30 before 2.6.1.4, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, and RBS40V before 2.6.1.4.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (34.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-45666?
- CVE-2021-45666 is a medium-severity vulnerability in NETGEAR Cbr40, classified under Cross-site Scripting. CVSS score: 6.5/10. Published 2021-12-26.
- How severe is CVE-2021-45666?
- Medium severity. CVSS v3 base score is 6.5 out of 10.