PT-2021-5941 · NetGear · Netgear Rbk352+1

Published 2021-09-26 · Updated 2022-01-05 · CVE-2021-45520

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions NETGEAR RBK352 versions prior to 4.4.0.10 NETGEAR RBR350 versions prior to 4.4.0.10 NETGEAR RBS350 versions prior to 4.4.0.10

Description The issue is related to a hardcoded password in certain NETGEAR devices. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For NETGEAR RBK352 versions prior to 4.4.0.10, update to version 4.4.0.10 or later. For NETGEAR RBR350 versions prior to 4.4.0.10, update to version 4.4.0.10 or later. For NETGEAR RBS350 versions prior to 4.4.0.10, update to version 4.4.0.10 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-259

Related Identifiers

BDU:2022-00456

CVE-2021-45520

Affected Products

Netgear Rbk352

Netgear Rbr350

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-45520 · Security Note
• https://bdu.fstec.ru/vul/2022-00456 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45520 · Vendor Advisory
• https://kb.netgear.com/000064151/Security-Advisory-for-Hardcoded-Password-on-Some-WiFi-Systems-PSV-2021-0012 · Vendor Advisory
• https://vuldb.com/?id.189146 · Note