NetSight
medium6.5

CVE-2021-45666

Certain NETGEAR devices are affected by stored XSS.

Impact

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, RBW30 before 2.6.1.4, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, and RBS40V before 2.6.1.4.

Affected products

VendorProductAffected versions
NetgearEax80 Firmware
before 1.0.1.64
NetgearEx3700 Firmware
before 1.0.0.90
NetgearEx3800 Firmware
before 1.0.0.90
NetgearEx6120 Firmware
before 1.0.0.64
NetgearEx6130 Firmware
before 1.0.0.44
NetgearEx7500 Firmware
before 1.0.0.72
NetgearRbw30 Firmware
before 2.6.1.4
NetgearRbk752 Firmware
before 3.2.16.6
NetgearRbr750 Firmware
before 3.2.16.6
NetgearRbs750 Firmware
before 3.2.16.6
NetgearRbk852 Firmware
before 3.2.16.6
NetgearRbr850 Firmware
before 3.2.16.6

Weakness classification

References