PT-2020-8765 · NetGear · Netgear Gs810Emx+2

Published 2020-04-22 · Updated 2020-04-24 · CVE-2018-21121

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR GS810EMX versions 1.0.0.0 through 1.0.0.4 NETGEAR XS512EM versions 1.0.0.0 through 1.0.0.5 NETGEAR XS724EM versions 1.0.0.0 through 1.0.0.5

Description The issue is related to authentication bypass in certain NETGEAR devices.

Recommendations For NETGEAR GS810EMX versions 1.0.0.0 through 1.0.0.4, update to version 1.0.0.5 or later. For NETGEAR XS512EM versions 1.0.0.0 through 1.0.0.5, update to version 1.0.0.6 or later. For NETGEAR XS724EM versions 1.0.0.0 through 1.0.0.5, update to version 1.0.0.6 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-21121

Affected Products

Netgear Gs810Emx

Netgear Xs512Em

Netgear Xs724Em

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-21121 · Security Note
• https://osv.dev/vulnerability/CVE-2018-21121 · Vendor Advisory
• https://kb.netgear.com/000060237/Security-Advisory-for-Authentication-Bypass-on-Some-Switches-PSV-2018-0219 · Vendor Advisory
• https://t.me/cvenotify/3041 · Telegram Post