CVE-2021-45493

Vulnerability

The vulnerability affects NETGEAR RAX35, RAX38, and RAX40 routers running firmware versions prior to 1.0.4.102. It allows disclosure of administrative credentials. The exact code path is not detailed in the advisory, but the CVSS vector indicates network-based exploitation with low complexity and no privileges required, though user interaction is required [1].

Exploitation

An unauthenticated attacker on the network can exploit this vulnerability by tricking a user into performing some action (user interaction required). The advisory does not provide specific steps, but the CVSS suggests that the attacker can obtain administrative credentials without authentication [1].

Impact

Successful exploitation leads to disclosure of administrative credentials, resulting in high confidentiality impact. The attacker may also gain limited integrity and availability impact (CVSS: I:L, A:L). With admin credentials, the attacker could potentially modify router settings or disrupt service [1].

Mitigation

NETGEAR has released firmware version 1.0.4.102 to fix this vulnerability. Users should update their devices to the latest firmware as soon as possible. No workarounds are mentioned. The advisory was published on 2021-12-20 [1].