CVE-2021-45660

No fix known EPSS <1%CVSS 7.1

Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 before 2.5.1.16, and RBS50Y before 2.6.1.40.

Published 2021-12-26 · CVE record · OSV

Products: netgear rbk40_firmware, netgear rbr40_firmware, netgear rbs40_firmware, netgear rbk20_firmware, netgear rbr20_firmware, netgear rbs20_firmware, netgear rbk50_firmware, netgear rbr50_firmware, netgear rbs50_firmware, netgear rbs50y_firmware