CVE-2021-45521

CWE-798 — Hard-coded Credentials3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 74.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Netgear Rbk352 FirmwareNetgear Rbr350 FirmwareNetgear Rbs350 Firmware
Timeline
PublishedDec 26
Latest updateDec 27

Description

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NExploitability: 2.8 | Impact: 4.0

Affected Packages3 packages

▶NVDnetgear/rbk352_firmware< 4.4.0.10
▶NVDnetgear/rbr350_firmware< 4.4.0.10
▶NVDnetgear/rbs350_firmware< 4.4.0.10

Patches

Patch: kb.netgear.com ↗Patch: kb.netgear.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-82jc-pw59-h652: Certain NETGEAR devices are affected by a hardcoded password↗2021-12-27
▶
CVEList
CVE-2021-45521: Certain NETGEAR devices are affected by a hardcoded password↗2021-12-26
▶
CVE-2021-45521 (MEDIUM CVSS 6.5) | Certain NETGEAR devices are affecte | cvebase.io