HIGH🇵🇱 Wersja polska

CVE-2021-44262

CVSS 7.5v3.1pub. 2022-03-17upd. 2024-11-21

A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Netgear Mbr1517

    HW
    Netgear
    v2

  • Netgear Mbr1517 Firmware

    OS
    Netgear
    wszystkie wersje

  • Netgear Wac104

    HW
    Netgear
    wszystkie wersje

  • Netgear Wac104 Firmware

    OS
    Netgear
    ≤ 1.0.4.13

  • Netgear Wnce3001

    HW
    Netgear
    wszystkie wersje

  • Netgear Wnce3001 Firmware

    OS
    Netgear
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-35973CRITICAL9.8ten sam produkt

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/min...

CVE-2020-35788HIGH7.6ten sam produkt

NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user.

CVE-2021-44261MEDIUM5.3ten sam produkt

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a...

CVE-2021-38532MEDIUM6.8ten sam produkt

NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings.

CVE-2020-26919CRITICAL9.8⚠ KEVten sam vendor

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.