10
CVE-2021-38513
- EPSS 1.83%
- Veröffentlicht 11.08.2021 00:15:10
- Zuletzt bearbeitet 21.11.2024 06:17:17
- Erkennungen
LoginCertain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RBK752 before 3.2.10.10, RBR750 before 3.2.10.10, and RBS750 before 3.2.10.10.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Rbk852 Firmware Version < 3.2.10.11
Netgear ≫ Rbr850 Firmware Version < 3.2.10.11
Netgear ≫ Rbs850 Firmware Version < 3.2.10.11
Netgear ≫ Cbr40 Firmware Version < 2.5.0.10
Netgear ≫ Eax20 Firmware Version < 1.0.0.48
Netgear ≫ Mk62 Firmware Version < 1.0.6.110
Netgear ≫ Mr60 Firmware Version < 1.0.6.110
Netgear ≫ Ms60 Firmware Version < 1.0.6.110
Netgear ≫ Rbk752 Firmware Version < 3.2.10.10
Netgear ≫ Rbr750 Firmware Version < 3.2.10.10
Netgear ≫ Rbs750 Firmware Version < 3.2.10.10
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.83% | 0.761 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| MITRE | 9.6 | 2.8 | 6 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
|
https://kb.netgear.com/000063777/Security-Advisory-for-Authentication-Bypass-on-Some-Extenders-and-WiFi-Systems-PSV-2020-0008