Authentication Bypass Vulnerability in NETGEAR XR1000 Devices
CVE-2021-45510

8.2HIGH

Key Information:

Vendor
Netgear
Status
Xr1000 Firmware
Vendor
CVE Published:
26 December 2021

Summary

The NETGEAR XR1000 devices prior to version 1.0.0.58 are susceptible to an authentication bypass vulnerability. This issue allows attackers to circumvent security measures, potentially granting unauthorized access to the device. Users are encouraged to upgrade to the latest firmware to mitigate this risk and ensure their network security is not compromised.

References

https://kb.netgear.com/000064150/Security-Advisory-for-Au...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.