CVE-2021-45658 : Security Advisory and Response

Certain NETGEAR devices are affected by server-side injection vulnerability.

Understanding CVE-2021-45658

What is CVE-2021-45658?

NETGEAR devices, including routers and extenders, are vulnerable to server-side injection. The specific affected models and versions are listed in the description.

The Impact of CVE-2021-45658

The vulnerability has a CVSS base score of 7.1, classifying it as HIGH severity. It can lead to high confidentiality and integrity impact.

Technical Details of CVE-2021-45658

Vulnerability Description

The vulnerability allows attackers to perform server-side injection on the affected NETGEAR devices.

Affected Systems and Versions

Models affected: D7800, DM200, EX2700, EX6150v2, EX6100v2, EX6200v2, EX6250, EX6410, EX6420, EX6400v2, EX7300, EX6400, EX7320, EX7300v2, R7500v2, R7800, R8900, R9000, RAX120, RBK40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, RBS50Y, WN3000RPv2, WN3000RPv3, WNR2000v5, XR500, XR700.

Exploitation Mechanism

The attack complexity is low, requiring low privileges. However, it has a high impact on confidentiality and integrity without requiring user interaction.

Mitigation and Prevention

Immediate Steps to Take

Update devices to the latest firmware provided by NETGEAR.
Regularly check for security advisories from NETGEAR.

Long-Term Security Practices

Implement network segmentation to restrict access to vulnerable devices.
Use strong and unique passwords for device access.
Monitor network traffic for any suspicious activities.

Patching and Updates

Apply patches and updates released by NETGEAR to address the vulnerability.