CVE-2021-29067

EUVD-2021-15708 · Published Mar 23, 2021

Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12.

Technologies

Netgear Rbs40V FirmwareNetgear Rbr850Netgear Rbk853 FirmwareNetgear Rbk753S FirmwareNetgear Rbk853Netgear Rbk852Netgear Rbs40VNetgear Rbk852 FirmwareNetgear Rbr850 FirmwareNetgear Rbk754 FirmwareNetgear Rbk753 FirmwareNetgear Rbw30Netgear Rbk752Netgear Rbk753Netgear Rbs850Netgear Rbs750 FirmwareNetgear Rbr750Netgear Rbs750Netgear Rbk854 FirmwareNetgear Rbk854Netgear Rbr750 FirmwareNetgear Rbs850 FirmwareNetgear Rbk752 FirmwareNetgear Rbk754Netgear Rbk753SNetgear Rbw30 Firmware

CVSS scores

v3.19.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
v2.08.3AV:A/AC:L/Au:N/C:C/I:C/A:C

References

https://kb.netgear.com/000063017/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0492

Potentially impacted assets

See if this affects your attack surface