CVE-2021-45509

Vulnerability

An authentication bypass vulnerability exists in multiple NETGEAR WiFi system models. The issue affects firmware versions: CBR40 prior to 2.5.0.24, and RBK752, RBR750, RBS750, RBK852, RBR850, RBS850 prior to 3.2.17.12 [1]. The vulnerability can be exploited remotely by an unauthenticated attacker.

Exploitation

An attacker can exploit this authentication bypass remotely by sending specially crafted requests to the device's management interface. No prior authentication or user interaction is required. The specific technical details of the exploit are not publicly disclosed in the advisory [1].

Impact

Successful exploitation grants the attacker full administrative access to the affected WiFi system. This can lead to unauthorized control over network settings, exposure of sensitive information including Wi-Fi passwords, and potential further compromise of connected devices.

Mitigation

NETGEAR has released fixed firmware versions: CBR40 firmware version 2.5.0.24, and firmware version 3.2.17.12 for RBK752, RBR750, RBS750, RBK852, RBR850, RBS850. Users should upgrade to the latest firmware as soon as possible via the NETGEAR support website [1]. No workarounds are provided.