CVE-2021-32122

Certain NETGEAR devices are affected by CSRF

Critical · published August 10, 2021

CVSS v3.1
9.8
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

🚨 A sneaky CSRF vulnerability could let attackers change your NETGEAR router settings without breaking a sweat! 🔥 Think of it like a restaurant where someone can order food on your behalf without you knowing. They just slip in a fake order and poof—your meal is on its way to them! This could lead to an attacker modifying your router settings, potentially redirecting your internet traffic or blocking your access. Basically, they could gain control over your home network, messing with your data and privacy—absolutely devastating!

Put simply

Think of it like a restaurant where someone can order food on your behalf without you knowing. They just slip in a fake order and poof—your meal is on its way to them! Specifically, this CSRF flaw affects several NETGEAR devices, allowing unauthorized changes to settings due to a lack of proper verification for state-changing requests. If you're using EX3700, EX3800, EX6120, or EX6130 versions prior to their respective fixes, you're at risk!

What to do

This could lead to an attacker modifying your router settings, potentially redirecting your internet traffic or blocking your access. Basically, they could gain control over your home network, messing with your data and privacy—absolutely devastating! Patch your devices to at least version 1.0.0.90 for EX3700 and EX3800 or 1.0.0.64 for EX6120 and 1.0.0.44 for EX6130. Additionally, regularly check your device settings to ensure nothing looks suspicious. Stay vigilant! You've got this! By following these steps, you'll be one step closer to securing your home network. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.0th percentile
Published
2021-08-10T23:58Z
EPSS history
Timeline
  • 10 AUG 23:58Z
    Certain NETGEAR devices are affected by CSRF
    cvelistv5