CVE-2021-45648 Information disclosure in n/a
Attackers can access sensitive information from various NETGEAR WiFi extenders and routers, requiring firmware updates to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-45648?
CVE-2021-45648 is a low-severity vulnerability in Netgear Rbk50 Firmware, published on 26 Dec 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EX6100v2 before 1.0.1.106, EX6150v2 before 1.0.1.106, EX6250 before 1.0.0.146, EX6400 before 1.0.2.164, EX6400v2 before 1.0.0.146, EX6410 before 1.0.0.146, EX6420 before 1.0.0.146, EX7300 before 1.0.2.164, EX7300v2 before 1.0.0.146, EX7320 before 1.0.0.146, EX7700 before 1.0.0.222, LBR1020 before 2.6.5.16, LBR20 before 2.6.5.2, RBK352 before 4.3.4.7, RBK50 before 2.7.3.22, RBR350 before 4.3.4.7, RBR50 before 2.7.3.22, and RBS350 before 4.3.4.7.
Weakness: CWE-200
Which versions are affected by CVE-2021-45648?
It affects 18 products.
Products include Netgear Ex6100v2 Firmware, Netgear Ex6150v2 Firmware, Netgear Ex6250 Firmware, Netgear Ex6400 Firmware, Netgear Ex6400v2 Firmware, Netgear Ex6410 Firmware and 12 more.
How do I fix CVE-2021-45648?
No fix has been published for CVE-2021-45648 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-45648 being exploited?
There is no known exploitation of CVE-2021-45648 in the wild and no public exploit code.
Other vulnerabilities in Netgear Rbk50 Firmware
Sources
Also known as GHSA-hhm5-85r6-q9w9.