CVE-2021-45521

HIGH

NETGEAR RBK352/RBR350/RBS350 < 4.4.0.10 - Use of Hard-coded Credentials

Title source: llm

Description

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://kb.netgear.com/000064161/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0045

Scores

CVSS v3 7.4

EPSS 0.0009

EPSS Percentile 25.2%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Details

CWE

CWE-798

Status published

Products (3)

netgear/rbk352_firmware < 4.4.0.10

netgear/rbr350_firmware < 4.4.0.10

netgear/rbs350_firmware < 4.4.0.10

Published Dec 26, 2021

Tracked Since Feb 18, 2026