CVE-2018-21121

HIGH

NETGEAR GS810EMX, XS512EM, and XS724EM - Authentication Bypass

Title source: llm

Description

Certain NETGEAR devices are affected by authentication bypass. This affects GS810EMX before 1.0.0.5, XS512EM before 1.0.0.6, and XS724EM before 1.0.0.6.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://kb.netgear.com/000060237/Security-Advisory-for-Authentication-Bypass-on-Some-Switches-PSV-2018-0219

Scores

CVSS v3 8.8

EPSS 0.0012

EPSS Percentile 30.7%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-287

Status published

Products (3)

netgear/gs810emx_firmware < 1.0.0.5

netgear/xs512em_firmware < 1.0.0.6

netgear/xs724em_firmware < 1.0.0.6

Published Apr 22, 2020

Tracked Since Feb 18, 2026