PT-2021-22173 · NetGear · R7200+59

Published

2021-08-11

·

Updated

2022-07-12

·

CVE-2021-38516

CVSS v3.1

10

Critical

VectorAC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N
Name of the Vulnerable Software and Affected Versions D6220 versions prior to 1.0.0.48 D6400 versions prior to 1.0.0.82 D7000v2 versions prior to 1.0.0.52 D7800 versions prior to 1.0.1.44 D8500 versions prior to 1.0.3.43 DC112A versions prior to 1.0.0.40 DGN2200v4 versions prior to 1.0.0.108 RBK50 versions prior to 2.3.0.32 RBR50 versions prior to 2.3.0.32 RBS50 versions prior to 2.3.0.32 RBK20 versions prior to 2.3.0.28 RBR20 versions prior to 2.3.0.28 RBS20 versions prior to 2.3.0.28 RBK40 versions prior to 2.3.0.28 RBR40 versions prior to 2.3.0.28 RBS40 versions prior to 2.3.0.28 R6020 versions prior to 1.0.0.34 R6080 versions prior to 1.0.0.34 R6120 versions prior to 1.0.0.44 R6220 versions prior to 1.1.0.80 R6230 versions prior to 1.1.0.80 R6250 versions prior to 1.0.4.34 R6260 versions prior to 1.1.0.40 R6850 versions prior to 1.1.0.40 R6350 versions prior to 1.1.0.40 R6400v2 versions prior to 1.0.2.62 R6700v3 versions prior to 1.0.2.62 R6700v2 versions prior to 1.2.0.36 R6800 versions prior to 1.2.0.36 R6900v2 versions prior to 1.2.0.36 R7000 versions prior to 1.0.9.34 R6900P versions prior to 1.3.1.44 R7000P versions prior to 1.3.1.44 R7100LG versions prior to 1.0.0.48 R7200 versions prior to 1.2.0.48 R7350 versions prior to 1.2.0.48 R7400 versions prior to 1.2.0.48 R7450 versions prior to 1.2.0.36 AC2100 versions prior to 1.2.0.36 AC2400 versions prior to 1.2.0.36 AC2600 versions prior to 1.2.0.36 R7500v2 versions prior to 1.0.3.38 R7800 versions prior to 1.0.2.58 R7900 versions prior to 1.0.3.8 R7960P versions prior to 1.4.1.44 R8000 versions prior to 1.0.4.28 R7900P versions prior to 1.4.1.30 R8000P versions prior to 1.4.1.30 R8900 versions prior to 1.0.4.2 R9000 versions prior to 1.0.4.2 RAX120 versions prior to 1.0.0.74 RBK752 versions prior to 3.2.16.6 RBR750 versions prior to 3.2.16.6 RBS750 versions prior to 3.2.16.6 RBK852 versions prior to 3.2.16.6 RBR850 versions prior to 3.2.16.6 RBS850 versions prior to 3.2.16.6 WNR3500Lv2 versions prior to 1.2.0.56 XR450 versions prior to 2.3.2.32 XR500 versions prior to 2.3.2.32
Description Certain NETGEAR devices are affected by a lack of access control at the function level.
Recommendations Update D6220 to version 1.0.0.48 or later Update D6400 to version 1.0.0.82 or later Update D7000v2 to version 1.0.0.52 or later Update D7800 to version 1.0.1.44 or later Update D8500 to version 1.0.3.43 or later Update DC112A to version 1.0.0.40 or later Update DGN2200v4 to version 1.0.0.108 or later Update RBK50 to version 2.3.0.32 or later Update RBR50 to version 2.3.0.32 or later Update RBS50 to version 2.3.0.32 or later Update RBK20 to version 2.3.0.28 or later Update RBR20 to version 2.3.0.28 or later Update RBS20 to version 2.3.0.28 or later Update RBK40 to version 2.3.0.28 or later Update RBR40 to version 2.3.0.28 or later Update RBS40 to version 2.3.0.28 or later Update R6020 to version 1.0.0.34 or later Update R6080 to version 1.0.0.34 or later Update R6120 to version 1.0.0.44 or later Update R6220 to version 1.1.0.80 or later Update R6230 to version 1.1.0.80 or later Update R6250 to version 1.0.4.34 or later Update R6260 to version 1.1.0.40 or later Update R6850 to version 1.1.0.40 or later Update R6350 to version 1.1.0.40 or later Update R6400v2 to version 1.0.2.62 or later Update R6700v3 to version 1.0.2.62 or later Update R6700v2 to version 1.2.0.36 or later Update R6800 to version 1.2.0.36 or later Update R6900v2 to version 1.2.0.36 or later Update R7000 to version 1.0.9.34 or later Update R6900P to version 1.3.1.44 or later Update R7000P to version 1.3.1.44 or later Update R7100LG to version 1.0.0.48 or later Update R7200 to version 1.2.0.48 or later Update R7350 to version 1.2.0.48 or later Update R7400 to version 1.2.0.48 or later Update R7450 to version 1.2.0.36 or later Update AC2100 to version 1.2.0.36 or later Update AC2400 to version 1.2.0.36 or later Update AC2600 to version 1.2.0.36 or later Update R7500v2 to version 1.0.3.38 or later Update R7800 to version 1.0.2.58 or later Update R7900 to version 1.0.3.8 or later Update R7960P to version 1.4.1.44 or later Update R8000 to version 1.0.4.28 or later Update R7900P to version 1.4.1.30 or later Update R8000P to version 1.4.1.30 or later Update R8900 to version 1.0.4.2 or later Update R9000 to version 1.0.4.2 or later Update RAX120 to version 1.0.0.74 or later Update RBK752 to version 3.2.16.6 or later Update RBR750 to version 3.2.16.6 or later Update RBS750 to version 3.2.16.6 or later Update RBK852 to version 3.2.16.6 or later Update RBR850 to version 3.2.16.6 or later Update RBS850 to version 3.2.16.6 or later Update WNR3500Lv2 to version 1.2.0.56 or later Update XR450 to version 2.3.2.32 or later Update XR500 to version 2.3.2.32 or later

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2021-38516

Affected Products

Ac2100
Ac2400
Ac2600
D6220
D6400
D7000V2
D7800
D8500
Dc112A
Dgn2200V4
R6020
R6080
R6120
R6220
R6230
R6250
R6260
R6350
R6400V2
R6700V2
R6700V3
R6800
R6850
R6900P
R6900V2
R7000
R7000P
R7100Lg
R7200
R7350
R7400
R7450
R7500V2
R7800
R7900
R7900P
R7960P
R8000
R8000P
R8900
R9000
Rax120
Rbk20
Rbk40
Rbk50
Rbk752
Rbk852
Rbr20
Rbr40
Rbr50
Rbr750
Rbr850
Rbs20
Rbs40
Rbs50
Rbs750
Rbs850
Wnr3500Lv2
Xr450
Xr500