CVE-2021-44261: NETGEAR r6220 Firmware

Medium severity, CVSS 5.3. EPSS: 20.3% chance of exploitation in the next 30 days.

A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device.

Affected products

• NETGEAR r6220 Firmware: up to and including 1.1.0.34_1.0.1
• NETGEAR r6900 Firmware: any version
• NETGEAR r7450 Firmware: any version
• NETGEAR r7800 Firmware: any version
• NETGEAR WAC104 Firmware: up to and including 1.0.4.13

Published 2022-03-17. Last modified 2026-06-17.