medium5.3
CVE-2021-44261
A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any …
Impact
A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Wac104 Firmware | through 1.0.4.13 |
| Netgear | R7450 Firmware | All versions |
| Netgear | R6900 Firmware | All versions |
| Netgear | R7800 Firmware | All versions |
| Netgear | R6220 Firmware | through 1.1.0.34_1.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_first.md
- https://www.netgear.com/about/security/
- https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_first.md
- https://www.netgear.com/about/security/