CVE-2021-45515

Vulnerability

A denial of service (DoS) vulnerability exists in multiple NETGEAR products, including EX7500, RBS40V, RBW30, RBRE960, RBSE960, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852, running firmware versions prior to the fixes listed in the advisory [1]. The exact nature of the vulnerability is not disclosed, but it can be exploited to cause the device to become unresponsive.

Exploitation

An attacker can exploit this vulnerability over the network, likely by sending specially crafted packets to the affected device. The advisory does not specify authentication requirements, but network access to the device is necessary [1].

Impact

Successful exploitation results in denial of service, causing the affected device to stop functioning normally, potentially disrupting network connectivity for users.

Mitigation

NETGEAR has released firmware updates to address this vulnerability. Affected users should upgrade to the following fixed versions or later: EX7500 to 1.0.0.72, RBS40V to 2.6.1.4, RBW30 to 2.6.1.4, RBRE960 to 6.0.3.68, RBSE960 to 6.0.3.68, RBR750 to 3.2.17.12, RBR850 to 3.2.17.12, RBS750 to 3.2.17.12, RBS850 to 3.2.17.12, RBK752 to 3.2.17.12, and RBK852 to 3.2.17.12 [1]. No workarounds are provided.