CVE-2021-45504
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBR852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NETGEAR CBR40 firmware | <2.5.0.24 | |
| Netgear CBR40 | ||
| NETGEAR CBR750 | <4.6.3.6 | |
| NETGEAR CBR750 | ||
| NETGEAR RBR850 firmware | <3.2.17.12 | |
| NETGEAR RBR850 firmware | ||
| NETGEAR RBR852 | <3.2.17.12 | |
| NETGEAR RBR852 | ||
| NETGEAR RBS850 | <3.2.17.12 | |
| NETGEAR RBS850 firmware | ||
| All of | ||
| NETGEAR CBR40 firmware | <2.5.0.24 | |
| Netgear CBR40 | ||
| All of | ||
| NETGEAR CBR750 | <4.6.3.6 | |
| NETGEAR CBR750 | ||
| All of | ||
| NETGEAR RBR850 firmware | <3.2.17.12 | |
| NETGEAR RBR850 firmware | ||
| All of | ||
| NETGEAR RBR852 | <3.2.17.12 | |
| NETGEAR RBR852 | ||
| All of | ||
| NETGEAR RBS850 | <3.2.17.12 | |
| NETGEAR RBS850 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2021-45504.
Which NETGEAR devices are affected by this vulnerability?
This vulnerability affects CBR40 before version 2.5.0.24, CBR750 before version 4.6.3.6, RBR852 before version 3.2.17.12, RBR850 before version 3.2.17.12, and RBS850 before version 3.2.17.12.
What is the severity of CVE-2021-45504?
The severity of CVE-2021-45504 is critical with a CVSS score of 9.8.
How does this vulnerability manifest?
This vulnerability allows for authentication bypass on certain NETGEAR devices.
Is there a fix available for this vulnerability?
Yes, a fix is available. It is recommended to update the affected devices to the latest firmware versions.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/remedy
- agent/first-publish-date
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- vendor/netgear
- canonical/netgear cbr40 firmware
- canonical/netgear cbr40
- canonical/netgear cbr750
- canonical/netgear rbr850 firmware
- canonical/netgear rbr852
- canonical/netgear rbs850
- canonical/netgear rbs850 firmware