CVE-2021-29067

CRITICAL

NETGEAR RBW30/RBS40V/RBK852/RBK853/RBK854/RBR850/RBS850/RBK752/RBK753/RBK753S/RBK754/RBR750/RBS750 Auth Bypass

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12.

References (1)

Core 1

Scores

CVSS v3 9.6
EPSS 0.0014
EPSS Percentile 33.6%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

Status published
Products (13)
netgear/rbk752_firmware < 3.2.17.12
netgear/rbk753_firmware < 3.2.17.12
netgear/rbk753s_firmware < 3.2.17.12
netgear/rbk754_firmware < 3.2.17.12
netgear/rbk852_firmware < 3.2.17.12
netgear/rbk853_firmware < 3.2.17.12
netgear/rbk854_firmware < 3.2.17.12
netgear/rbr750_firmware < 3.2.17.12
netgear/rbr850_firmware < 3.2.17.12
netgear/rbs40v_firmware < 2.6.2.4
... and 3 more
Published Mar 23, 2021
Tracked Since Feb 18, 2026