What is CVE-2021-38516?

CVE-2021-38516 is a critical-severity vulnerability in Netgear Ac2100. CVSS score: 10.0/10. Published 2021-08-11.

How severe is CVE-2021-38516?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Is CVE-2021-38516 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Netgear Ac2100

CVE-2021-38516

Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D7000v2 before 1.0.0.52, D7800 before 1.0.1.44, D8500 before 1.0.3.43, DC112A before 1.0.0.40…

EPSS: 0.013 (67.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Public proof-of-concept exploits

n0-traces/cve_

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-38516?: CVE-2021-38516 is a critical-severity vulnerability in Netgear Ac2100. CVSS score: 10.0/10. Published 2021-08-11.
How severe is CVE-2021-38516?: Critical severity. CVSS v3 base score is 10.0 out of 10.
Is CVE-2021-38516 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.