CVE-2021-38513

CWE-287 — Improper Authentication3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.3%
top 45.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Mk62 Firmware+8 more
Timeline
PublishedAug 11
Latest updateMay 24

Description

Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RBK752 before 3.2.10.10, RBR750 before 3.2.10.10, and RBS750 before 3.2.10.10.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:LExploitability: 2.8 | Impact: 6.0

Affected Packages11 packages

▶NVDnetgear/mk62_firmware< 1.0.6.110
▶NVDnetgear/mr60_firmware< 1.0.6.110
▶NVDnetgear/ms60_firmware< 1.0.6.110
▶NVDnetgear/cbr40_firmware< 2.5.0.10
▶NVDnetgear/eax20_firmware< 1.0.0.48

🔴Vulnerability Details

2
GHSA
GHSA-9q3f-56hc-cwvq: Certain NETGEAR devices are affected by authentication bypass↗2022-05-24
▶
CVEList
CVE-2021-38513: Certain NETGEAR devices are affected by authentication bypass↗2021-08-11
▶