Medium severity · published Jan 25, 2022
CVE-2021-34870
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 routers
6.5
CVSS
0.9%
EPSS
No
On KEV
Description
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP messages. The issue results from a lack of authentication required for a privileged request. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-13325.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XR
Xr1000 · Netgear
1.0.0.52_1.0.38 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-34870
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-34870
Patch
https://kb.netgear.com/000063967/Security-Advisory-for-a-Security-Misconfiguration-Vulnerability-on-the-XR1000-PSV-2021-0101
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1058/
More from Xr1000
8.1
CVE-2026-9213
Insufficient input validation in certain NETGEAR routers
6.4
CVE-2026-11739
Command injection vulnerability in some NETGEAR Nighthawk devices
4.9
CVE-2026-11736
Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers
4.9
CVE-2026-11735
Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models
4.9
CVE-2026-62657
Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models