CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-45502

CVSS 9.6v3.1pub. 2021-12-26upd. 2024-11-21

Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Netgear Cbr750

    HW
    Netgear
    all versions

  • Netgear Cbr750 Firmware

    OS
    Netgear
    < 4.6.3.6

  • Netgear Rbk752

    HW
    Netgear
    all versions

  • Netgear Rbk752 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbk852

    HW
    Netgear
    all versions

  • Netgear Rbk852 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbr750

    HW
    Netgear
    all versions

  • Netgear Rbr750 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbr850

    HW
    Netgear
    all versions

  • Netgear Rbr850 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbs750

    HW
    Netgear
    all versions

  • Netgear Rbs750 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbs850

    HW
    Netgear
    all versions

  • Netgear Rbs850 Firmware

    OS
    Netgear
    < 3.2.17.12
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-49007CRITICAL9.8PL ✓same product

Stack-based buffer overflow w Netgear Orbi RBR750 — RCE przez sieć

CVE-2022-37337CRITICAL9.1PL ✓same product

Command Injection w Netgear Orbi Router RBR750 — wykonanie dowolnych poleceń

CVE-2021-45505CRITICAL9.6PL ✓same product

Authentication Bypass w urządzeniach NETGEAR WiFi (Orbi/CBR)

CVE-2021-45503CRITICAL9.6PL ✓same product

Authentication bypass w urządzeniach NETGEAR WiFi (CBR750, RBK/RBR/RBS 750/850)

CVE-2021-45504CRITICAL9.6PL ✓same product

Authentication Bypass w urządzeniach NETGEAR CBR40, CBR750, RBR850 i RBS850