9.8

CVE-2021-45507

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBW30 before 2.6.2.2, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS40V before 2.6.2.8.

Data is provided by the National Vulnerability Database (NVD)
NetgearCbr40 Firmware Version < 2.5.0.24
   NetgearCbr40 Version-
NetgearCbr750 Firmware Version < 4.6.3.6
   NetgearCbr750 Version-
NetgearRbw30 Firmware Version < 2.6.2.2
   NetgearRbw30 Version-
NetgearRbk752 Firmware Version < 3.2.17.12
   NetgearRbk752 Version-
NetgearRbr750 Firmware Version < 3.2.17.12
   NetgearRbr750 Version-
NetgearRbs750 Firmware Version < 3.2.17.12
   NetgearRbs750 Version-
NetgearRbk852 Firmware Version < 3.2.17.12
   NetgearRbk852 Version-
NetgearRbr850 Firmware Version < 3.2.17.12
   NetgearRbr850 Version-
NetgearRbs850 Firmware Version < 3.2.17.12
   NetgearRbs850 Version-
NetgearRbs40v Firmware Version < 2.6.2.8
   NetgearRbs40v Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.33% 0.792
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
cve@mitre.org 9.6 2.8 6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H