10

CVE-2021-38516

Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, R6020 before 1.0.0.34, R6080 before 1.0.0.34, R6120 before 1.0.0.44, R6220 before 1.1.0.80, R6230 before 1.1.0.80, R6250 before 1.0.4.34, R6260 before 1.1.0.40, R6850 before 1.1.0.40, R6350 before 1.1.0.40, R6400v2 before 1.0.2.62, R6700v3 before 1.0.2.62, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, R7000 before 1.0.9.34, R6900P before 1.3.1.44, R7000P before 1.3.1.44, R7100LG before 1.0.0.48, R7200 before 1.2.0.48, R7350 before 1.2.0.48, R7400 before 1.2.0.48, R7450 before 1.2.0.36, AC2100 before 1.2.0.36, AC2400 before 1.2.0.36, AC2600 before 1.2.0.36, R7500v2 before 1.0.3.38, R7800 before 1.0.2.58, R7900 before 1.0.3.8, R7960P before 1.4.1.44, R8000 before 1.0.4.28, R7900P before 1.4.1.30, R8000P before 1.4.1.30, R8900 before 1.0.4.2, R9000 before 1.0.4.2, RAX120 before 1.0.0.74, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, WNR3500Lv2 before 1.2.0.56, XR450 before 2.3.2.32, and XR500 before 2.3.2.32.

Data is provided by the National Vulnerability Database (NVD)
NetgearD6220 Firmware Version < 1.0.0.48
   NetgearD6220 Version-
NetgearD6400 Firmware Version < 1.0.0.82
   NetgearD6400 Version-
NetgearD7000 Firmware Version < 1.0.0.52
   NetgearD7000 Versionv2
NetgearD7800 Firmware Version < 1.0.1.44
   NetgearD7800 Version-
NetgearD8500 Firmware Version < 1.0.3.43
   NetgearD8500 Version-
NetgearDc112a Firmware Version < 1.0.0.40
   NetgearDc112a Version-
NetgearDgn2200 Firmware Version < 1.0.0.108
   NetgearDgn2200 Versionv4
NetgearRbk50 Firmware Version < 2.3.0.32
   NetgearRbk50 Version-
NetgearRbr50 Firmware Version < 2.3.0.32
   NetgearRbr50 Version-
NetgearRbs50 Firmware Version < 2.3.0.32
   NetgearRbs50 Version-
NetgearRbk20 Firmware Version < 2.3.0.28
   NetgearRbk20 Version-
NetgearRbr20 Firmware Version < 2.3.0.28
   NetgearRbr20 Version-
NetgearRbs20 Firmware Version < 2.3.0.28
   NetgearRbs20 Version-
NetgearRbk40 Firmware Version < 2.3.0.28
   NetgearRbk40 Version-
NetgearRbr40 Firmware Version < 2.3.0.28
   NetgearRbr40 Version-
NetgearRbs40 Firmware Version < 2.3.0.28
   NetgearRbs40 Version-
NetgearR6020 Firmware Version < 1.0.0.34
   NetgearR6020 Version-
NetgearR6080 Firmware Version < 1.0.0.34
   NetgearR6080 Version-
NetgearR6120 Firmware Version < 1.0.0.44
   NetgearR6120 Version-
NetgearR6220 Firmware Version < 1.1.0.80
   NetgearR6220 Version-
NetgearR6230 Firmware Version < 1.1.0.80
   NetgearR6230 Version-
NetgearR6250 Firmware Version < 1.0.4.34
   NetgearR6250 Version-
NetgearR6260 Firmware Version < 1.1.0.40
   NetgearR6260 Version-
NetgearR6850 Firmware Version < 1.1.0.40
   NetgearR6850 Version-
NetgearR6350 Firmware Version < 1.1.0.40
   NetgearR6350 Version-
NetgearR6400 Firmware Version < 1.0.2.62
   NetgearR6400 Versionv2
NetgearR6700 Firmware Version < 1.0.2.62
   NetgearR6700 Versionv3
NetgearR6700 Firmware Version < 1.2.0.36
   NetgearR6700 Versionv2
NetgearR6800 Firmware Version < 1.2.0.36
   NetgearR6800 Version-
NetgearR6900 Firmware Version < 1.2.0.36
   NetgearR6900 Versionv2
NetgearR7000 Firmware Version < 1.0.9.34
   NetgearR7000 Version-
NetgearR6900p Firmware Version < 1.3.1.44
   NetgearR6900p Version-
NetgearR7000p Firmware Version < 1.3.1.44
   NetgearR7000p Version-
NetgearR7100lg Firmware Version < 1.0.0.48
   NetgearR7100lg Version-
NetgearR7200 Firmware Version < 1.2.0.48
   NetgearR7200 Version-
NetgearR7350 Firmware Version < 1.2.0.48
   NetgearR7350 Version-
NetgearR7400 Firmware Version < 1.2.0.48
   NetgearR7400 Version-
NetgearR7450 Firmware Version < 1.2.0.36
   NetgearR7450 Version-
NetgearAc2100 Firmware Version < 1.2.0.36
   NetgearAc2100 Version-
NetgearAc2400 Firmware Version < 1.2.0.36
   NetgearAc2400 Version-
NetgearAc2600 Firmware Version < 1.2.0.36
   NetgearAc2600 Version-
NetgearR7500 Firmware Version < 1.0.3.38
   NetgearR7500 Versionv2
NetgearR7800 Firmware Version < 1.0.2.58
   NetgearR7800 Version-
NetgearR7900 Firmware Version < 1.0.3.8
   NetgearR7900 Version-
NetgearR7960p Firmware Version < 1.4.1.44
   NetgearR7960p Version-
NetgearR8000 Firmware Version < 1.0.4.28
   NetgearR8000 Version-
NetgearR7900p Firmware Version < 1.4.1.30
   NetgearR7900p Version-
NetgearR8000p Firmware Version < 1.4.1.30
   NetgearR8000p Version-
NetgearR8900 Firmware Version < 1.0.4.2
   NetgearR8900 Version-
NetgearR9000 Firmware Version < 1.0.4.2
   NetgearR9000 Version-
NetgearRax120 Firmware Version < 1.0.0.74
   NetgearRax120 Version-
NetgearRbk752 Firmware Version < 3.2.16.6
   NetgearRbk752 Version-
NetgearRbr750 Firmware Version < 3.2.16.6
   NetgearRbr750 Version-
NetgearRbs750 Firmware Version < 3.2.16.6
   NetgearRbs750 Version-
NetgearRbk852 Firmware Version < 3.2.16.6
   NetgearRbk852 Version-
NetgearRbr850 Firmware Version < 3.2.16.6
   NetgearRbr850 Version-
NetgearRbs850 Firmware Version < 3.2.16.6
   NetgearRbs850 Version-
NetgearWnr3500l Firmware Version < 1.2.0.56
   NetgearWnr3500l Versionv2
NetgearXr450 Firmware Version < 2.3.2.32
   NetgearXr450 Version-
NetgearXr500 Firmware Version < 2.3.2.32
   NetgearXr500 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.44% 0.604
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
cve@mitre.org 10 3.9 6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H