Threat Investigation
Request a demo

CVE-2018-21226

High

Description

Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48, WNR2020 before 1.1.0.48, and WNR2050 before 1.1.0.48.

SeverityHigh
CVSS8.8
Exploit probability—
ProductNetgear Jnr1010 Firmware
PublishedApr 28, 2020
First seenApr 28, 2020

How to fix

Update
  • netgear jnr1010_firmware1.1.0.48 or later
  • netgear jwnr2010_firmware1.1.0.48 or later
  • netgear wnr1000_firmware1.1.0.48 or later
  • netgear wnr2020_firmware1.1.0.48 or later
  • netgear wnr2050_firmware1.1.0.48 or later

Affected products

ProductAffected versionsFixed in
netgear jnr1010_firmwarev < 1.1.0.481.1.0.48
netgear jwnr2010_firmwarev < 1.1.0.481.1.0.48
netgear wnr1000_firmwarev < 1.1.0.481.1.0.48
netgear wnr2020_firmwarev < 1.1.0.481.1.0.48
netgear wnr2050_firmwarev < 1.1.0.481.1.0.48

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.