CVE-2021-29067 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2021-29067

Analyzed

More Info Official Page

Source-cve@mitre.org

Published At-23 Mar, 2021 | 07:15

Updated At-12 Jul, 2022 | 17:42

Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.6	CRITICAL	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Secondary	3.1	9.6	CRITICAL	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary	2.0	8.3	HIGH	AV:A/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.6

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 9.6

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 8.3

Base severity: HIGH

Vector:

AV:A/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

>>rbw30_firmware>>Versions before 2.6.2.2(exclusive)

cpe:2.3:o:netgear:rbw30_firmware:*:*:*:*:*:*:*:*

>>rbw30>>-

cpe:2.3:h:netgear:rbw30:-:*:*:*:*:*:*:*

>>rbs40v_firmware>>Versions before 2.6.2.4(exclusive)

cpe:2.3:o:netgear:rbs40v_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbs40v:-:*:*:*:*:*:*:*

>>rbk852_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*

>>rbk853_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*

>>rbk854_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*

>>rbr850_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*

>>rbs850_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*

>>rbk752_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*

>>rbk753_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbk753:-:*:*:*:*:*:*:*

>>rbk753s_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbk753s:-:*:*:*:*:*:*:*

>>rbk754_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbk754:-:*:*:*:*:*:*:*

>>rbr750_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*

>>rbs750_firmware>>Versions before 3.2.17.12(exclusive)

cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://kb.netgear.com/000063017/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0492	cve@mitre.org	Vendor Advisory

Hyperlink: https://kb.netgear.com/000063017/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0492

Source: cve@mitre.org

Resource:

Vendor Advisory