VulnerabilityModified
CVE-2021-38513
Certain NETGEAR devices are affected by authentication bypass.
CRITICAL 9.8EPSS 1.83%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.83%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RBK752 before 3.2.10.10, RBR750 before 3.2.10.10, and RBS750 before 3.2.10.10.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.83% probability · 78th percentile
- CISA KEV
- Not listed
- Affected
- netgear/rbk852 firmware · netgear/rbr850 firmware · netgear/rbs850 firmware · netgear/cbr40 firmware · netgear/eax20 firmware · netgear/mk62 firmware · netgear/mr60 firmware · netgear/ms60 firmware · netgear/rbk752 firmware · netgear/rbr750 firmware · netgear/rbs750 firmware
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.