CVE-2021-29065

NETGEAR RBR850 devices before 3.2.10.11 are affected by authentication bypass

Critical · published March 23, 2021

CVSS v3.1
9.6
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

🚨 A critical authentication bypass in NETGEAR RBR850 devices could leave your network wide open! 🔥 Think of this vulnerability like a hotel with a broken front door lock — anyone can walk in without checking in, potentially wreaking havoc on your stay. It's an invitation for anyone to poke around your private data and settings! An attacker could stroll right into your network, gaining full access to sensitive information and configurations. This could lead to devastating consequences, including unauthorized changes or even total control of connected devices. Don't let your network become a free-for-all!

Put simply

Think of this vulnerability like a hotel with a broken front door lock — anyone can walk in without checking in, potentially wreaking havoc on your stay. It's an invitation for anyone to poke around your private data and settings! This vulnerability allows unauthorized users to bypass authentication checks due to improper session handling, letting anyone access the administration interface without valid credentials.

What to do

An attacker could stroll right into your network, gaining full access to sensitive information and configurations. This could lead to devastating consequences, including unauthorized changes or even total control of connected devices. Don't let your network become a free-for-all! Update your NETGEAR RBR850 to version 3.2.10.11 or later immediately to close this security gap. Additionally, review your network settings for any unauthorized changes; it’s always best to be proactive! You've got this! Secure your network today, and keep those digital vigilantes at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00629 · 49.5th percentile
Published
2021-03-23T07:00Z
EPSS history
Timeline
  • 23 MAR 07:00Z
    NETGEAR RBR850 devices before 3.2.10.11 are affected by authentication bypass
    cvelistv5