CVE-2021-45508

Certain NETGEAR devices are affected by authentication bypass

Critical · published December 26, 2021

CVSS v3.1
9.6
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

🚨 An authentication bypass lurks in several NETGEAR devices, allowing unauthorized access with no login required! 🔥 It's like a hotel that gives out spare keys to anyone who asks, without checking if they're guests — just a quick request, and anyone can waltz into any room! An attacker could gain full control over your network devices, making changes, viewing traffic, and potentially causing chaos behind your firewall. This is absolutely devastating for your security posture, as the attacker could intercept sensitive data and manipulate settings at will!

Put simply

It's like a hotel that gives out spare keys to anyone who asks, without checking if they're guests — just a quick request, and anyone can waltz into any room! Affected NETGEAR models, including CBR40 and RBK852, are vulnerable due to a flaw that allows users to bypass authentication checks, enabling unauthorized access to device functions.

What to do

An attacker could gain full control over your network devices, making changes, viewing traffic, and potentially causing chaos behind your firewall. This is absolutely devastating for your security posture, as the attacker could intercept sensitive data and manipulate settings at will! Update your NETGEAR device firmware to the latest versions: CBR40 to 2.5.0.24, RBK750 to 4.6.3.6, and others to their respective fixed versions to secure your devices. Regularly check for updates and ensure your devices are configured as recommended to enhance security. You’ve got this! Take action today to lock down your network and keep your data safe. 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01181 · 67.5th percentile
Published
2021-12-26T01:02Z
EPSS history
Timeline
  • 26 DEC 01:02Z
    Certain NETGEAR devices are affected by authentication bypass
    cvelistv5