CVE & CISA-KEV Catalog

CVE-2021-38516

CRITICAL
10.0
CVSS v3
NVD

Description

Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40, DGN2200v4 before 1.0.0.108, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBR40 before 2.3.0.28, RBS40 before 2.3.0.28, R6020 before 1.0.0.34, R6080 before 1.0.0.34, R6120 before 1.0.0.44, R6220 before 1.1.0.80, R6230 before 1.1.0.80, R6250 before 1.0.4.34, R6260 before 1.1.0.40, R6850 before 1.1.0.40, R6350 before 1.1.0.40, R6400v2 before 1.0.2.62, R6700v3 before 1.0.2.62, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, R7000 before 1.0.9.34, R6900P before 1.3.1.44, R7000P before 1.3.1.44, R7100LG before 1.0.0.48, R7200 before 1.2.0.48, R7350 before 1.2.0.48, R7400 before 1.2.0.48, R7450 before 1.2.0.36, AC2100 before 1.2.0.36, AC2400 before 1.2.0.36, AC2600 before 1.2.0.36, R7500v2 before 1.0.3.38, R7800 before 1.0.2.58, R7900 before 1.0.3.8, R7960P before 1.4.1.44, R8000 before 1.0.4.28, R7900P before 1.4.1.30, R8000P before 1.4.1.30, R8900 before 1.0.4.2, R9000 before 1.0.4.2, RAX120 before 1.0.0.74, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, WNR3500Lv2 before 1.2.0.56, XR450 before 2.3.2.32, and XR500 before 2.3.2.32.

How to fix

Remediation Available
ac2100 firmwareNVD
Affected:< 1.2.0.36Fixed in:1.2.0.36CVE-2021-38516derived from NVD
ac2400 firmwareNVD
Affected:< 1.2.0.36Fixed in:1.2.0.36CVE-2021-38516derived from NVD
ac2600 firmwareNVD
Affected:< 1.2.0.36Fixed in:1.2.0.36CVE-2021-38516derived from NVD
d6220 firmwareNVD
Affected:< 1.0.0.48Fixed in:1.0.0.48CVE-2021-38516derived from NVD
d6400 firmwareNVD
Affected:< 1.0.0.82Fixed in:1.0.0.82CVE-2021-38516derived from NVD
d7000 firmwareNVD
Affected:< 1.0.0.52Fixed in:1.0.0.52CVE-2021-38516derived from NVD
d7800 firmwareNVD
Affected:< 1.0.1.44Fixed in:1.0.1.44CVE-2021-38516derived from NVD
d8500 firmwareNVD
Affected:< 1.0.3.43Fixed in:1.0.3.43CVE-2021-38516derived from NVD
dc112a firmwareNVD
Affected:< 1.0.0.40Fixed in:1.0.0.40CVE-2021-38516derived from NVD
dgn2200 firmwareNVD
Affected:< 1.0.0.108Fixed in:1.0.0.108CVE-2021-38516derived from NVD
r6020 firmwareNVD
Affected:< 1.0.0.34Fixed in:1.0.0.34CVE-2021-38516derived from NVD
r6080 firmwareNVD
Affected:< 1.0.0.34Fixed in:1.0.0.34CVE-2021-38516derived from NVD
r6120 firmwareNVD
Affected:< 1.0.0.44Fixed in:1.0.0.44CVE-2021-38516derived from NVD
r6220 firmwareNVD
Affected:< 1.1.0.80Fixed in:1.1.0.80CVE-2021-38516derived from NVD
r6230 firmwareNVD
Affected:< 1.1.0.80Fixed in:1.1.0.80CVE-2021-38516derived from NVD
r6250 firmwareNVD
Affected:< 1.0.4.34Fixed in:1.0.4.34CVE-2021-38516derived from NVD
r6260 firmwareNVD
Affected:< 1.1.0.40Fixed in:1.1.0.40CVE-2021-38516derived from NVD
r6350 firmwareNVD
Affected:< 1.1.0.40Fixed in:1.1.0.40CVE-2021-38516derived from NVD
r6400 firmwareNVD
Affected:< 1.0.2.62Fixed in:1.0.2.62CVE-2021-38516derived from NVD
r6700 firmwareNVD
Affected:< 1.2.0.36Fixed in:1.2.0.36CVE-2021-38516derived from NVD
r6800 firmwareNVD
Affected:< 1.2.0.36Fixed in:1.2.0.36CVE-2021-38516derived from NVD
r6850 firmwareNVD
Affected:< 1.1.0.40Fixed in:1.1.0.40CVE-2021-38516derived from NVD
r6900 firmwareNVD
Affected:< 1.2.0.36Fixed in:1.2.0.36CVE-2021-38516derived from NVD
r6900p firmwareNVD
Affected:< 1.3.1.44Fixed in:1.3.1.44CVE-2021-38516derived from NVD
r7000 firmwareNVD
Affected:< 1.0.9.34Fixed in:1.0.9.34CVE-2021-38516derived from NVD
r7000p firmwareNVD
Affected:< 1.3.1.44Fixed in:1.3.1.44CVE-2021-38516derived from NVD
r7100lg firmwareNVD
Affected:< 1.0.0.48Fixed in:1.0.0.48CVE-2021-38516derived from NVD
r7200 firmwareNVD
Affected:< 1.2.0.48Fixed in:1.2.0.48CVE-2021-38516derived from NVD
r7350 firmwareNVD
Affected:< 1.2.0.48Fixed in:1.2.0.48CVE-2021-38516derived from NVD
r7400 firmwareNVD
Affected:< 1.2.0.48Fixed in:1.2.0.48CVE-2021-38516derived from NVD
r7450 firmwareNVD
Affected:< 1.2.0.36Fixed in:1.2.0.36CVE-2021-38516derived from NVD
r7500 firmwareNVD
Affected:< 1.0.3.38Fixed in:1.0.3.38CVE-2021-38516derived from NVD
r7800 firmwareNVD
Affected:< 1.0.2.58Fixed in:1.0.2.58CVE-2021-38516derived from NVD
r7900 firmwareNVD
Affected:< 1.0.3.8Fixed in:1.0.3.8CVE-2021-38516derived from NVD
r7900p firmwareNVD
Affected:< 1.4.1.30Fixed in:1.4.1.30CVE-2021-38516derived from NVD
r7960p firmwareNVD
Affected:< 1.4.1.44Fixed in:1.4.1.44CVE-2021-38516derived from NVD
r8000 firmwareNVD
Affected:< 1.0.4.28Fixed in:1.0.4.28CVE-2021-38516derived from NVD
r8000p firmwareNVD
Affected:< 1.4.1.30Fixed in:1.4.1.30CVE-2021-38516derived from NVD
r8900 firmwareNVD
Affected:< 1.0.4.2Fixed in:1.0.4.2CVE-2021-38516derived from NVD
r9000 firmwareNVD
Affected:< 1.0.4.2Fixed in:1.0.4.2CVE-2021-38516derived from NVD
rax120 firmwareNVD
Affected:< 1.0.0.74Fixed in:1.0.0.74CVE-2021-38516derived from NVD
rbk20 firmwareNVD
Affected:< 2.3.0.28Fixed in:2.3.0.28CVE-2021-38516derived from NVD
rbk40 firmwareNVD
Affected:< 2.3.0.28Fixed in:2.3.0.28CVE-2021-38516derived from NVD
rbk50 firmwareNVD
Affected:< 2.3.0.32Fixed in:2.3.0.32CVE-2021-38516derived from NVD
rbk752 firmwareNVD
Affected:< 3.2.16.6Fixed in:3.2.16.6CVE-2021-38516derived from NVD
rbk852 firmwareNVD
Affected:< 3.2.16.6Fixed in:3.2.16.6CVE-2021-38516derived from NVD
rbr20 firmwareNVD
Affected:< 2.3.0.28Fixed in:2.3.0.28CVE-2021-38516derived from NVD
rbr40 firmwareNVD
Affected:< 2.3.0.28Fixed in:2.3.0.28CVE-2021-38516derived from NVD
rbr50 firmwareNVD
Affected:< 2.3.0.32Fixed in:2.3.0.32CVE-2021-38516derived from NVD
rbr750 firmwareNVD
Affected:< 3.2.16.6Fixed in:3.2.16.6CVE-2021-38516derived from NVD
rbr850 firmwareNVD
Affected:< 3.2.16.6Fixed in:3.2.16.6CVE-2021-38516derived from NVD
rbs20 firmwareNVD
Affected:< 2.3.0.28Fixed in:2.3.0.28CVE-2021-38516derived from NVD
rbs40 firmwareNVD
Affected:< 2.3.0.28Fixed in:2.3.0.28CVE-2021-38516derived from NVD
rbs50 firmwareNVD
Affected:< 2.3.0.32Fixed in:2.3.0.32CVE-2021-38516derived from NVD
rbs750 firmwareNVD
Affected:< 3.2.16.6Fixed in:3.2.16.6CVE-2021-38516derived from NVD
rbs850 firmwareNVD
Affected:< 3.2.16.6Fixed in:3.2.16.6CVE-2021-38516derived from NVD
wnr3500l firmwareNVD
Affected:< 1.2.0.56Fixed in:1.2.0.56CVE-2021-38516derived from NVD
xr450 firmwareNVD
Affected:< 2.3.2.32Fixed in:2.3.2.32CVE-2021-38516derived from NVD
xr500 firmwareNVD
Affected:< 2.3.2.32Fixed in:2.3.2.32CVE-2021-38516derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeChanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploit Intelligence

1.34%probability of exploitation in 30 days
68thpercentile

Moderate risk: more likely to be exploited than 68% of all known CVEs.

References

Vendor Advisory1
Embed a live status badge for CVE-2021-38516
CVE-2021-38516 severity badge

Markdown

[![CVE-2021-38516](https://tridentstack.com/cve/badge/CVE-2021-38516.svg)](https://tridentstack.com/cve/CVE-2021-38516)

HTML

<a href="https://tridentstack.com/cve/CVE-2021-38516"><img src="https://tridentstack.com/cve/badge/CVE-2021-38516.svg" alt="CVE-2021-38516"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.