CVE-2021-38516
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, R6020 before 1.0.0.34, R6080 before 1.0.0.34, R6120 before 1.0.0.44, R6220 before 1.1.0.80, R6230 before 1.1.0.80, R6250 before 1.0.4.34, R6260 before 1.1.0.40, R6850 before 1.1.0.40, R6350 before 1.1.0.40, R6400v2 before 1.0.2.62, R6700v3 before 1.0.2.62, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, R7000 before 1.0.9.34, R6900P before 1.3.1.44, R7000P before 1.3.1.44, R7100LG before 1.0.0.48, R7200 before 1.2.0.48, R7350 before 1.2.0.48, R7400 before 1.2.0.48, R7450 before 1.2.0.36, AC2100 before 1.2.0.36, AC2400 before 1.2.0.36, AC2600 before 1.2.0.36, R7500v2 before 1.0.3.38, R7800 before 1.0.2.58, R7900 before 1.0.3.8, R7960P before 1.4.1.44, R8000 before 1.0.4.28, R7900P before 1.4.1.30, R8000P before 1.4.1.30, R8900 before 1.0.4.2, R9000 before 1.0.4.2, RAX120 before 1.0.0.74, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, WNR3500Lv2 before 1.2.0.56, XR450 before 2.3.2.32, and XR500 before 2.3.2.32.
Affected (60)
Products: Netgear: D6220 Firmware, D6400 Firmware, D7000 Firmware, D7800 Firmware, D8500 Firmware, Dc112a Firmware, Dgn2200 Firmware, Rbk50 Firmware, Rbr50 Firmware, Rbs50 Firmware, Rbk20 Firmware, Rbr20 Firmware, Rbs20 Firmware, Rbk40 Firmware, Rbr40 Firmware, Rbs40 Firmware, R6020 Firmware, R6080 Firmware, R6120 Firmware, R6220 Firmware, R6230 Firmware, R6250 Firmware, R6260 Firmware, R6850 Firmware, R6350 Firmware, R6400 Firmware, R6700 Firmware, R6800 Firmware, R6900 Firmware, R7000 Firmware, R6900p Firmware, R7000p Firmware, R7100lg Firmware, R7200 Firmware, R7350 Firmware, R7400 Firmware, R7450 Firmware, Ac2100 Firmware, Ac2400 Firmware, Ac2600 Firmware, R7500 Firmware, R7800 Firmware, R7900 Firmware, R7960p Firmware, R8000 Firmware, R7900p Firmware, R8000p Firmware, R8900 Firmware, R9000 Firmware, Rax120 Firmware, Rbk752 Firmware, Rbr750 Firmware, Rbs750 Firmware, Rbk852 Firmware, Rbr850 Firmware, Rbs850 Firmware, Wnr3500l Firmware, Xr450 Firmware, Xr500 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear D6220 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.82 |
| Running on/with | Platform Versions |
|---|---|
Netgear D6400 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.52 |
| Running on/with | Platform Versions |
|---|---|
Netgear D7000 | Version v2 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear D7800 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.43 |
| Running on/with | Platform Versions |
|---|---|
Netgear D8500 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.40 |
| Running on/with | Platform Versions |
|---|---|
Netgear Dc112a | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.108 |
| Running on/with | Platform Versions |
|---|---|
Netgear Dgn2200 | Version v4 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.32 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk50 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.32 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr50 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.32 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs50 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk20 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr20 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs20 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk40 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr40 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.0.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs40 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.34 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6020 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.34 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6080 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6120 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.80 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6220 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.80 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6230 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.34 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6250 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.40 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6260 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.40 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6850 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.40 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6350 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6400 | Version v2 |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700 | Version v3 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700 | Version v2 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6800 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900 | Version v2 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.9.34 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.1.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900p | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.1.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000p | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7100lg | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7200 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7350 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.48 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7400 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7450 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2100 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2400 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.36 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2600 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.38 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7500 | Version v2 |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.58 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7800 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.8 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.44 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7960p | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.28 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8000 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.30 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900p | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.1.30 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8000p | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.2 |
| Running on/with | Platform Versions |
|---|---|
Netgear R8900 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.2 |
| Running on/with | Platform Versions |
|---|---|
Netgear R9000 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.74 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax120 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk752 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr750 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs750 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbk852 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbr850 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.2.16.6 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rbs850 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.56 |
| Running on/with | Platform Versions |
|---|---|
Netgear Wnr3500l | Version v2 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.2.32 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr450 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.3.2.32 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr500 | All versions |
References (2)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.