Vulnerability in Netgear D3600

CVE-2021-38514

Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before 1.1.00.34, D6220 before 1.0.0.48, D6400 before 1.0.0.86, D7000 before 1.0.1.70, D…

EPSS: 0.007 (48.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.4 (Low). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.

Affected products

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2021-38514?
CVE-2021-38514 is a low-severity vulnerability in Netgear D3600. CVSS score: 2.4/10. Published 2021-08-11.
How severe is CVE-2021-38514?
Low severity. CVSS v3 base score is 2.4 out of 10.
Is CVE-2021-38514 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.