Vulnerability in NETGEAR Ac2100
CVE-2021-38531
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R7450 before 1.2.0.76, AC2100 before 1.2.0.76, and AC2400 before 1.2.0.76.
EPSS: 0.004 (34.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N.
Affected products
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-38531?
- CVE-2021-38531 is a medium-severity vulnerability in NETGEAR Ac2100. CVSS score: 4.7/10. Published 2021-08-11.
- How severe is CVE-2021-38531?
- Medium severity. CVSS v3 base score is 4.7 out of 10.