CVE-2021-38513

Published: Aug 11, 2021Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RBK752 before 3.2.10.10, RBR750 before 3.2.10.10, and RBS750 before 3.2.10.10.

Affected (11)

Products: Netgear: Rbk852 Firmware, Rbr850 Firmware, Rbs850 Firmware, Cbr40 Firmware, Eax20 Firmware, Mk62 Firmware, Mr60 Firmware, Ms60 Firmware, Rbk752 Firmware, Rbr750 Firmware, Rbs750 Firmware

11 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk852 Firmware	Before 3.2.10.11

Running on/with	Platform Versions
Netgear Rbk852	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr850 Firmware	Before 3.2.10.11

Running on/with	Platform Versions
Netgear Rbr850	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs850 Firmware	Before 3.2.10.11

Running on/with	Platform Versions
Netgear Rbs850	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Cbr40 Firmware	Before 2.5.0.10

Running on/with	Platform Versions
Netgear Cbr40	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Eax20 Firmware	Before 1.0.0.48

Running on/with	Platform Versions
Netgear Eax20	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Mk62 Firmware	Before 1.0.6.110

Running on/with	Platform Versions
Netgear Mk62	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Mr60 Firmware	Before 1.0.6.110

Running on/with	Platform Versions
Netgear Mr60	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ms60 Firmware	Before 1.0.6.110

Running on/with	Platform Versions
Netgear Ms60	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk752 Firmware	Before 3.2.10.10

Running on/with	Platform Versions
Netgear Rbk752	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr750 Firmware	Before 3.2.10.10

Running on/with	Platform Versions
Netgear Rbr750	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs750 Firmware	Before 3.2.10.10

Running on/with	Platform Versions
Netgear Rbs750	All versions

References (2)

https://kb.netgear.com/000063777/Security-Advisory-for-Authentication-Bypass-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0008

Source: cve@mitre.org

Vendor Advisory

https://kb.netgear.com/000063777/Security-Advisory-for-Authentication-Bypass-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0008

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.