Unauthenticated Remote Admin Access in NETGEAR Smart Switches
CVE-2021-40866

9.8CRITICAL

Key Information:

Vendor
Netgear
Status
Gc108p Firmware
Vendor
CVE Published:
13 September 2021

Summary

A vulnerability has been identified in certain NETGEAR smart switches that allows unauthenticated attackers to remotely change the admin password. This is made possible through the /sqfs/bin/sccd daemon that does not adequately verify authentication when receiving NSDP packets without the necessary authentication TLV. This issue affects multiple versions of various smart switch models, potentially exposing network configurations to unauthorized changes.

References

https://gynvael.coldwind.pl/?id=740
x_refsource_MISC
https://kb.netgear.com/000063978/Security-Advisory-for-Mu...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.