CVE-2021-45509

Certain NETGEAR devices are affected by authentication bypass

Critical · published December 26, 2021

CVSS v3.1
9.6
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

🚨 An authentication bypass in various NETGEAR devices could let attackers waltz right in like they own the place! 🔥 Imagine a hotel that forgot to check IDs at the door—anyone could stroll into your room without a key! That's essentially what's happening here, and it’s a huge security oversight. An attacker could exploit this flaw to gain unauthorized access to your network, potentially allowing them to change settings, intercept traffic, or even lure other devices into their nefarious plans. If you have one of the affected models, this vulnerability could lead to absolutely devastating consequences for your data and privacy.

Put simply

Imagine a hotel that forgot to check IDs at the door—anyone could stroll into your room without a key! That's essentially what's happening here, and it’s a huge security oversight. This vulnerability allows unauthorized access because the affected NETGEAR devices fail to properly authenticate users, making it possible for an attacker to bypass security checks and take control of the device.

What to do

An attacker could exploit this flaw to gain unauthorized access to your network, potentially allowing them to change settings, intercept traffic, or even lure other devices into their nefarious plans. If you have one of the affected models, this vulnerability could lead to absolutely devastating consequences for your data and privacy. Update your NETGEAR device firmware immediately to at least the fixed versions: CBR40 to 2.5.0.24, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 to 3.2.17.12. After updating, regularly check for further updates and ensure secure configurations are in place to protect your network. You've got this! Stay vigilant and proactive, and let's keep the internet safe together! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01181 · 67.5th percentile
Published
2021-12-26T01:01Z
EPSS history
Timeline
  • 26 DEC 01:01Z
    Certain NETGEAR devices are affected by authentication bypass
    cvelistv5