CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-38513
Critical (9.8) in netgear. EPSS 1.8% chance of exploitation in the next 30 days.
Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RBK752 before 3.2.10.10, RBR750 before 3.2.10.10, and RBS750 before 3.2.10.10.
Severity
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netgear:cbr40_firmware
- netgear:eax20_firmware
- netgear:mk62_firmware
- netgear:mr60_firmware
- netgear:ms60_firmware
- netgear:rbk752_firmware
- netgear:rbk852_firmware
- netgear:rbr750_firmware
- netgear:rbr850_firmware
- netgear:rbs750_firmware
- netgear:rbs850_firmware