CVE-2021-40866

CWE-287 — Improper Authentication3 documents3 sources
Severity
8.8HIGH
EPSS
1.4%
top 19.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
20
Netgear Gc108p FirmwareNetgear Gc108pp FirmwareNetgear Gs108t Firmware+17 more
Timeline
PublishedSep 13
Latest updateMay 24

Description

Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd daemon, which fails to check authentication when the authentication TLV is missing from a received NSDP packet. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, G…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages20 packages

▶NVDnetgear/gs750e_firmware< 1.0.1.10

🔴Vulnerability Details

2
GHSA
GHSA-89xh-mm48-p72f: Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/s↗2022-05-24
▶
CVEList
CVE-2021-40866: Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/s↗2021-09-13
▶
CVE-2021-40866 (HIGH CVSS 8.8) | Certain NETGEAR smart switches are | cvebase.io