CVE-2021-45503

Certain NETGEAR devices are affected by authentication bypass

Critical · published December 26, 2021

CVSS v3.1
9.6
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

🚨 An authentication bypass in certain NETGEAR devices means unauthorized users could potentially gain access without breaking a sweat! 🔥 Think of it as having a front door that opens for anyone who simply knocks, regardless of whether they have the right key — a very unexpected and careless security flaw! An attacker could waltz into your network, accessing sensitive information and potentially taking control of your devices. This could lead to data breaches, privacy violations, and even malicious activities that could compromise your entire network security. It’s absolutely devastating!

Put simply

Think of it as having a front door that opens for anyone who simply knocks, regardless of whether they have the right key — a very unexpected and careless security flaw! This vulnerability arises because several NETGEAR devices fail to properly validate user credentials, allowing attackers to bypass authentication mechanisms. Specifically, the affected versions include CBR750 before 4.6.3.6 and several RBK and RBS series models before 3.2.17.12.

What to do

An attacker could waltz into your network, accessing sensitive information and potentially taking control of your devices. This could lead to data breaches, privacy violations, and even malicious activities that could compromise your entire network security. It’s absolutely devastating! To protect yourself, immediately update to the latest firmware versions: 4.6.3.6 for CBR750 and 3.2.17.12 for RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850. Don’t overlook these updates — your network security depends on it! You’ve got this! Follow these steps and you'll keep your devices safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00475 · 40.1th percentile
Published
2021-12-26T01:02Z
EPSS history
Timeline
  • 26 DEC 01:02Z
    Certain NETGEAR devices are affected by authentication bypass
    cvelistv5