CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-45507

CVSS 9.6v3.1pub. 2021-12-26upd. 2024-11-21

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBW30 before 2.6.2.2, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS40V before 2.6.2.8.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Netgear Cbr40

    HW
    Netgear
    all versions

  • Netgear Cbr40 Firmware

    OS
    Netgear
    < 2.5.0.24

  • Netgear Cbr750

    HW
    Netgear
    all versions

  • Netgear Cbr750 Firmware

    OS
    Netgear
    < 4.6.3.6

  • Netgear Rbk752

    HW
    Netgear
    all versions

  • Netgear Rbk752 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbk852

    HW
    Netgear
    all versions

  • Netgear Rbk852 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbr750

    HW
    Netgear
    all versions

  • Netgear Rbr750 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbr850

    HW
    Netgear
    all versions

  • Netgear Rbr850 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbs40v

    HW
    Netgear
    all versions

  • Netgear Rbs40v Firmware

    OS
    Netgear
    < 2.6.2.8

  • Netgear Rbs750

    HW
    Netgear
    all versions

  • Netgear Rbs750 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbs850

    HW
    Netgear
    all versions

  • Netgear Rbs850 Firmware

    OS
    Netgear
    < 3.2.17.12

  • Netgear Rbw30

    HW
    Netgear
    all versions

  • Netgear Rbw30 Firmware

    OS
    Netgear
    < 2.6.2.2
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-49007CRITICAL9.8PL ✓same product

Stack-based buffer overflow w Netgear Orbi RBR750 — RCE przez sieć

CVE-2023-36187CRITICAL9.8PL ✓same product

Buffer Overflow w NETGEAR R6400v2 — zdalne wykonanie kodu bez uwierzytelnienia

CVE-2022-37337CRITICAL9.1PL ✓same product

Command Injection w Netgear Orbi Router RBR750 — wykonanie dowolnych poleceń

CVE-2021-45504CRITICAL9.6PL ✓same product

Authentication Bypass w urządzeniach NETGEAR CBR40, CBR750, RBR850 i RBS850

CVE-2021-45502CRITICAL9.6PL ✓same product

Authentication Bypass w urządzeniach NETGEAR WiFi Systems (CBR750, RBK/RBR/RBS 750/850)