CVE-2021-45520

CRITICAL

NETGEAR RBK352/RBR350/RBS350 < 4.4.0.10 - Use of Hard-coded Credentials

Title source: llm

Description

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://kb.netgear.com/000064151/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0012

Scores

CVSS v3 9.6

EPSS 0.0014

EPSS Percentile 32.9%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-798

Status published

Products (3)

netgear/rbk352_firmware < 4.4.0.10

netgear/rbr350_firmware < 4.4.0.10

netgear/rbs350_firmware < 4.4.0.10

Published Dec 26, 2021

Tracked Since Feb 18, 2026