CVE-2021-29080
Severity Score
8.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR854 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, R7000 before 1.0.11.116, R6900P before 1.3.2.126, R7900 before 1.0.4.38, R7960P before 1.4.1.66, R8000 before 1.0.4.66, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, and R7000P before 1.3.2.126.
Determinados dispositivos NETGEAR están afectados por un restablecimiento de contraseña por parte de un atacante no autenticado. Esto afecta al RBK852 versiones anteriores a 3.2.10.11, al RBK853 versiones anteriores a 3.2.10.11, al RBR854 versiones anteriores a 3.2.10.11, al RBR850 versiones anteriores a 3.2.10.11, al RBS850 versiones anteriores a 3.2.10.11, al CBR40 versiones anteriores a 2.5.0.10, al R7000 versiones anteriores a 1.0.11.116, al R6900P versiones anteriores a 1. 3.2.126, R7900 versiones anteriores a 1.0.4.38, R7960P versiones anteriores a 1.4.1.66, R8000 versiones anteriores a 1.0.4.66, R7900P versiones anteriores a 1.4.1.66, R8000P versiones anteriores a 1.4.1.66, RAX75 versiones anteriores a 1.0.3.102, RAX80 versiones anteriores a 1.0.3.102 y R7000P versiones anteriores a 1.3.2.126
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-03-23 CVE Reserved
- 2021-03-23 CVE Published
- 2023-12-07 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-640: Weak Password Recovery Mechanism for Forgotten Password
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Rbk852 Firmware Search vendor "Netgear" for product "Rbk852 Firmware" | < 3.2.10.11 Search vendor "Netgear" for product "Rbk852 Firmware" and version " < 3.2.10.11" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk852 Search vendor "Netgear" for product "Rbk852" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk853 Firmware Search vendor "Netgear" for product "Rbk853 Firmware" | < 3.2.10.11 Search vendor "Netgear" for product "Rbk853 Firmware" and version " < 3.2.10.11" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk853 Search vendor "Netgear" for product "Rbk853" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbr854 Firmware Search vendor "Netgear" for product "Rbr854 Firmware" | < 3.2.10.11 Search vendor "Netgear" for product "Rbr854 Firmware" and version " < 3.2.10.11" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbr854 Search vendor "Netgear" for product "Rbr854" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbr850 Firmware Search vendor "Netgear" for product "Rbr850 Firmware" | < 3.2.10.11 Search vendor "Netgear" for product "Rbr850 Firmware" and version " < 3.2.10.11" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbr850 Search vendor "Netgear" for product "Rbr850" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbs850 Firmware Search vendor "Netgear" for product "Rbs850 Firmware" | < 3.2.10.11 Search vendor "Netgear" for product "Rbs850 Firmware" and version " < 3.2.10.11" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbs850 Search vendor "Netgear" for product "Rbs850" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Cbr40 Firmware Search vendor "Netgear" for product "Cbr40 Firmware" | < 2.5.0.10 Search vendor "Netgear" for product "Cbr40 Firmware" and version " < 2.5.0.10" | - |
Affected
| in | Netgear Search vendor "Netgear" | Cbr40 Search vendor "Netgear" for product "Cbr40" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000 Firmware Search vendor "Netgear" for product "R7000 Firmware" | < 1.0.11.116 Search vendor "Netgear" for product "R7000 Firmware" and version " < 1.0.11.116" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000 Search vendor "Netgear" for product "R7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6900p Firmware Search vendor "Netgear" for product "R6900p Firmware" | < 1.3.2.126 Search vendor "Netgear" for product "R6900p Firmware" and version " < 1.3.2.126" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6900p Search vendor "Netgear" for product "R6900p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7900 Firmware Search vendor "Netgear" for product "R7900 Firmware" | < 1.0.4.38 Search vendor "Netgear" for product "R7900 Firmware" and version " < 1.0.4.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7900 Search vendor "Netgear" for product "R7900" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7960p Firmware Search vendor "Netgear" for product "R7960p Firmware" | < 1.4.1.66 Search vendor "Netgear" for product "R7960p Firmware" and version " < 1.4.1.66" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7960p Search vendor "Netgear" for product "R7960p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R8000 Firmware Search vendor "Netgear" for product "R8000 Firmware" | < 1.0.4.66 Search vendor "Netgear" for product "R8000 Firmware" and version " < 1.0.4.66" | - |
Affected
| in | Netgear Search vendor "Netgear" | R8000 Search vendor "Netgear" for product "R8000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7900p Firmware Search vendor "Netgear" for product "R7900p Firmware" | < 1.4.1.66 Search vendor "Netgear" for product "R7900p Firmware" and version " < 1.4.1.66" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7900p Search vendor "Netgear" for product "R7900p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R8000p Firmware Search vendor "Netgear" for product "R8000p Firmware" | < 1.4.1.66 Search vendor "Netgear" for product "R8000p Firmware" and version " < 1.4.1.66" | - |
Affected
| in | Netgear Search vendor "Netgear" | R8000p Search vendor "Netgear" for product "R8000p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rax75 Firmware Search vendor "Netgear" for product "Rax75 Firmware" | < 1.0.3.102 Search vendor "Netgear" for product "Rax75 Firmware" and version " < 1.0.3.102" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rax75 Search vendor "Netgear" for product "Rax75" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rax80 Firmware Search vendor "Netgear" for product "Rax80 Firmware" | < 1.0.3.102 Search vendor "Netgear" for product "Rax80 Firmware" and version " < 1.0.3.102" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rax80 Search vendor "Netgear" for product "Rax80" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000p Firmware Search vendor "Netgear" for product "R7000p Firmware" | < 1.3.2.126 Search vendor "Netgear" for product "R7000p Firmware" and version " < 1.3.2.126" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000p Search vendor "Netgear" for product "R7000p" | - | - |
Safe
|