CVE-2021-32122
CRITICALNETGEAR EX3700/EX3800/EX6120/EX6130 - Cross-Site Request Forgery
Title source: llmDescription
Certain NETGEAR devices are affected by CSRF. This affects EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, and EX6130 before 1.0.0.44.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://kb.netgear.com/000063883/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Extenders-PSV-2021-0102
Scores
CVSS v3
9.8
EPSS
0.0018
EPSS Percentile
38.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-352
Status
published
Products (4)
netgear/ex3700_firmware
< 1.0.0.90
netgear/ex3800_firmware
< 1.0.0.90
netgear/ex6120_firmware
< 1.0.0.64
netgear/ex6130_firmware
< 1.0.0.44
Published
Aug 11, 2021
Tracked Since
Feb 18, 2026