CVE-2021-45652

Certain NETGEAR devices are affected by disclosure of sensitive information

Critical · published December 26, 2021

CVSS v3.1
9.6
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

🔥 Sensitive info is slipping through the cracks! Certain NETGEAR devices, including RBK352 and RBR350, are vulnerable before version 4.4.0.10, exposing critical data. ⚡ Think of it like a restaurant that accidentally leaves the confidential recipe book open on the counter for anyone to glance at — super risky for the chef's secret sauce! If exploited, an attacker could access sensitive information, potentially including configurations and user data. This kind of breach can lead to more severe compromises, affecting privacy and security — a nightmare for both users and the brand!

Put simply

Think of it like a restaurant that accidentally leaves the confidential recipe book open on the counter for anyone to glance at — super risky for the chef's secret sauce! This vulnerability allows unauthorized access to sensitive information on specific NETGEAR devices due to improper handling of security features, enabling attackers to read critical data without authentication.

What to do

If exploited, an attacker could access sensitive information, potentially including configurations and user data. This kind of breach can lead to more severe compromises, affecting privacy and security — a nightmare for both users and the brand! Update your NETGEAR devices immediately to version 4.4.0.10 or later to close this security hole. It's a straightforward fix that can protect your personal data and devices from exposure! You've got this! With a quick update, you'll restore your security and keep the bad guys at bay. 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01081 · 64.9th percentile
Published
2021-12-26T00:28Z
EPSS history
Timeline
  • 26 DEC 00:28Z
    Certain NETGEAR devices are affected by disclosure of sensitive information
    cvelistv5