MEDIUM🇵🇱 Wersja polska

CVE-2021-44261

CVSS 5.3v3.1pub. 2022-03-17upd. 2024-11-21

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Netgear R6220

    HW
    Netgear
    all versions

  • Netgear R6220 Firmware

    OS
    Netgear
    ≤ 1.1.0.34_1.0.1

  • Netgear R6900

    HW
    Netgear
    v2

  • Netgear R6900 Firmware

    OS
    Netgear
    all versions

  • Netgear R7450

    HW
    Netgear
    all versions

  • Netgear R7450 Firmware

    OS
    Netgear
    all versions

  • Netgear R7800

    HW
    Netgear
    all versions

  • Netgear R7800 Firmware

    OS
    Netgear
    all versions

  • Netgear Wac104

    HW
    Netgear
    all versions

  • Netgear Wac104 Firmware

    OS
    Netgear
    ≤ 1.0.4.13
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2016-10174CRITICAL9.8⚠ KEVPL ✓same product

Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia

CVE-2023-30280CRITICAL9.8PL ✓same product

Buffer Overflow w routerach Netgear R6900/R6700 — zdalne wykonanie kodu

CVE-2021-45619CRITICAL9.6PL ✓same product

NETGEAR — command injection bez uwierzytelnienia w routerach i extenderach

CVE-2021-45501CRITICAL9.4PL ✓same product

Authentication Bypass w urządzeniach NETGEAR — wiele modeli routerów

CVE-2021-45618CRITICAL9.6PL ✓same product

NETGEAR — unauthenticated command injection w routerach i extenderach