NetSight
critical9.6

CVE-2021-38513

Certain NETGEAR devices are affected by authentication bypass.

Impact

Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RBK752 before 3.2.10.10, RBR750 before 3.2.10.10, and RBS750 before 3.2.10.10.

Affected products

VendorProductAffected versions
NetgearRbk852 Firmware
before 3.2.10.11
NetgearRbr850 Firmware
before 3.2.10.11
NetgearRbs850 Firmware
before 3.2.10.11
NetgearCbr40 Firmware
before 2.5.0.10
NetgearEax20 Firmware
before 1.0.0.48
NetgearMk62 Firmware
before 1.0.6.110
NetgearMr60 Firmware
before 1.0.6.110
NetgearMs60 Firmware
before 1.0.6.110
NetgearRbk752 Firmware
before 3.2.10.10
NetgearRbr750 Firmware
before 3.2.10.10
NetgearRbs750 Firmware
before 3.2.10.10

References