CVE-2021-45667

CVE-2021-45667 is a stored Cross-Site Scripting (XSS) vulnerability affecting numerous NETGEAR router and extender models, including various CBR40, EAX, EX, R79xxP, RAX, RBS, RBW, MS, and MR series devices. The vulnerability has a CVSSv3.1 score of 4.8 (Medium), indicating that an attacker with high privileges could inject malicious scripts into affected devices, which would then be executed in a victim's browser upon viewing the compromised page. While the attack complexity is low, user interaction is required, and the potential impact is limited to low confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.