CVE-2021-38513 Auth bypass in n/a
Attackers can bypass authentication on various NETGEAR routers and mesh systems to gain unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-38513?
CVE-2021-38513 is a critical authentication bypass vulnerability in Netgear Rbk752 Firmware, published on 11 Aug 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RBK752 before 3.2.10.10, RBR750 before 3.2.10.10, and RBS750 before 3.2.10.10.
Which versions are affected by CVE-2021-38513?
It affects 11 products.
Products include Netgear Cbr40 Firmware, Netgear Eax20 Firmware, Netgear Mk62 Firmware, Netgear Mr60 Firmware, Netgear Ms60 Firmware, Netgear Rbk752 Firmware and 5 more.
How do I fix CVE-2021-38513?
No fix has been published for CVE-2021-38513 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-38513 being exploited?
There is no known exploitation of CVE-2021-38513 in the wild and no public exploit code.
Other vulnerabilities in Netgear Rbk752 Firmware
Sources
Also known as GHSA-9q3f-56hc-cwvq.