Description (CNA)
An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NETGEAR / RBE970 | affected 0 before v9.13.2.1 |
| NETGEAR / RBE971 | affected 0 before v9.13.2.1 |
| NETGEAR / CBR750 | affected 0 before V4.6.14.8 |
| NETGEAR / NBR750 | affected 0 before V4.6.15.14 |
| NETGEAR / RBE770 | affected 0 before v10.5.20.7 |
| NETGEAR / RBE771 | affected 0 before v10.5.20.7 |
| NETGEAR / RBE772 | affected 0 before v10.5.20.7 |
| NETGEAR / RBE773 | affected 0 before v10.5.20.7 |
| NETGEAR / RBR750 | affected 0 before v7.2.8.2 |
| NETGEAR / RBS750 | affected 0 before v7.2.8.2 |
| NETGEAR / RBR840 | affected 0 before v7.2.8.2 |
| NETGEAR / RBS840 | affected 0 before v7.2.8.2 |
| NETGEAR / RBR850 | affected 0 before v7.2.8.2 |
| NETGEAR / RBS850 | affected 0 before v7.2.8.2 |
| NETGEAR / RBR860 | affected 0 before v7.2.8.2 |
| NETGEAR / RBS860 | affected 0 before v7.2.8.2 |
| NETGEAR / RBRE950 | affected 0 before v7.2.8.2 |
| NETGEAR / RBSE950 | affected 0 before v7.2.8.2 |
| NETGEAR / RBRE960 | affected 0 before v7.2.8.2 |
| NETGEAR / RBSE960 | affected 0 before v7.2.8.2 |
| NETGEAR / RBE370 | affected 0 before v12.1.3.11 |
| NETGEAR / RBE371 | affected 0 before v12.1.3.11 |
| NETGEAR / RBE372 | affected 0 before v12.1.3.11 |
| NETGEAR / RBE373 | affected 0 before v12.1.3.11 |
| NETGEAR / RBE374 | affected 0 before v12.1.3.11 |
CWE
CWE-287
References
- https://www.netgear.com/support/product/rbe971
- https://www.netgear.com/support/product/rbe970
- https://www.netgear.com/support/product/cbr750
- https://www.netgear.com/support/product/nbr750
- https://www.netgear.com/support/product/rbe770
- https://www.netgear.com/support/product/rbe771
- https://www.netgear.com/support/product/rbe772
- https://www.netgear.com/support/product/rbe773
- https://www.netgear.com/support/product/rbr750
- https://www.netgear.com/support/product/rbs750
- https://www.netgear.com/support/product/rbr840
- https://www.netgear.com/support/product/rbs840
- https://www.netgear.com/support/product/rbr850
- https://www.netgear.com/support/product/rbs850
- https://www.netgear.com/support/product/rbr860
- https://www.netgear.com/support/product/rbs860
- https://www.netgear.com/support/product/rbre950
- https://www.netgear.com/support/product/rbse950
- https://www.netgear.com/support/product/rbre960
- https://www.netgear.com/support/product/rbse960
- https://www.netgear.com/support/product/rbe370
- https://www.netgear.com/support/product/rbe371
- https://www.netgear.com/support/product/rbe372
- https://www.netgear.com/support/product/rbe373
- https://www.netgear.com/support/product/rbe374
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
ADP enrichment
No English description supplied.
No references supplied.