high7.1
CVE-2021-41449
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access…
Impact
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Rax35 Firmware | before 1.0.4.102 |
| Netgear | Rax38 Firmware | before 1.0.4.102 |
| Netgear | Rax40 Firmware | before 1.0.4.102 |
Weakness classification
References
- NVD record
- CVE.org record
- https://kb.netgear.com/000064405/Security-Advisory-for-Path-Traversal-on-Some-Routers-PSV-2021-0268
- https://www.netgear.com/about/security/
- https://kb.netgear.com/000064405/Security-Advisory-for-Path-Traversal-on-Some-Routers-PSV-2021-0268
- https://www.netgear.com/about/security/