CVE-2021-45508
CRITICALNETGEAR CBR40/RBR750/RBS750/RBK752/RBR850/RBK852/CBR750 - Authentication Bypass
Title source: llmDescription
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, and RBR850 before 3.2.17.12.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://kb.netgear.com/000064133/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0490
Scores
CVSS v3
9.6
EPSS
0.0040
EPSS Percentile
60.5%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Details
Status
published
Products (7)
netgear/cbr40_firmware
< 2.5.0.24
netgear/cbr750_firmware
< 4.6.3.6
netgear/rbk752_firmware
< 3.2.17.12
netgear/rbk852_firmware
< 3.2.17.12
netgear/rbr750_firmware
< 3.2.17.12
netgear/rbr850_firmware
< 3.2.17.12
netgear/rbs750_firmware
< 3.2.17.12
Published
Dec 26, 2021
Tracked Since
Feb 18, 2026