Information disclosure in NETGEAR products - #VU73742

Vulnerability identifier: #VU73742

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: N/A

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
CBR750
LAX20
MK62
MR60
MS60
MK72
MR70
MS70
MK82
MR80
MS80
NBR750
RAX35v2
RAX38v2
RAX40v2
RAX42
RAX43
RAX45
RAX48
RAX50
RAX50S
RAXE450
RAXE500
RBK752
RBR750
RBS750
RBK842
RBR840
RBS840
RBK852
RBR850
RBS850
RBKE962
RBRE960
RBSE960
XR1000

Software vendor:
NETGEAR

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a security misconfiguration issue. A remote attacker can gain unauthorized access to sensitive information on the system.

Install updates from vendor's website.

• https://kb.netgear.com/000065575/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-WiFi-Systems-PSV-2021-0196