CVE-2021-45506

Certain NETGEAR devices are affected by authentication bypass

Critical · published December 26, 2021

CVSS v3.1
9.6
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

🚨 An authentication bypass in NETGEAR devices means anyone could stroll right in without a password — talk about an open door! 🔥 This vulnerability is like a hotel that forgot to lock its back entrance; anyone could walk in and access the guest rooms without any checks. It’s surprisingly easy for attackers to take advantage of devices with no password protection! An attacker could gain full access to your NETGEAR device, allowing them to change settings, monitor your network traffic, or even compromise other devices on your network. This is a serious threat, especially if the attacker has malicious intent — your privacy and security are at stake!

Put simply

This vulnerability is like a hotel that forgot to lock its back entrance; anyone could walk in and access the guest rooms without any checks. It’s surprisingly easy for attackers to take advantage of devices with no password protection! This vulnerability allows attackers to bypass authentication on various NETGEAR devices by exploiting improper security controls. Devices such as CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 running versions before specified are at risk.

What to do

An attacker could gain full access to your NETGEAR device, allowing them to change settings, monitor your network traffic, or even compromise other devices on your network. This is a serious threat, especially if the attacker has malicious intent — your privacy and security are at stake! To secure your devices, immediately update to the latest firmware versions: CBR750 to 4.6.3.6 and RBK752/RBR750/RBS750/RBK852/RBR850/RBS850 to 3.2.17.12 or higher. Additionally, review your network configuration and ensure all devices have strong, unique passwords. You’ve got this! With a quick update, you'll be back in control of your network! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Published
2021-12-26T01:02Z
EPSS history
Timeline
  • 26 DEC 01:02Z
    Certain NETGEAR devices are affected by authentication bypass
    cvelistv5