CVE-2021-45508

· CRITICALModified

← All CVEs

CVSS v3.1

9.6

EPSS

1.14%

Published

Dec 25, 2021

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, and RBR850 before 3.2.17.12.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products (14)

netgear · cbr40_firmware (up to 2.5.0.24)vulnerable

netgear · cbr40

netgear · cbr750_firmware (up to 4.6.3.6)vulnerable

netgear · cbr750

netgear · rbk752_firmware (up to 3.2.17.12)vulnerable

netgear · rbk752

netgear · rbr750_firmware (up to 3.2.17.12)vulnerable

netgear · rbr750

netgear · rbs750_firmware (up to 3.2.17.12)vulnerable

netgear · rbs750

netgear · rbk852_firmware (up to 3.2.17.12)vulnerable

netgear · rbk852

netgear · rbr850_firmware (up to 3.2.17.12)vulnerable

netgear · rbr850

References (2)

https://kb.netgear.com/000064133/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0490

PatchVendor Advisory

https://kb.netgear.com/000064133/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0490

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs