NETGEAR RBK50V Firmware vulnerabilities

2 CVEs affecting NETGEAR RBK50V Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-38514, published 2021-08-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27861, published 2021-02-12. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this…
CVE-2021-38514, published 2021-08-11. Low severity, CVSS 2.7. EPSS: 0.8% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6100 before 1.0.0.63, D6200 before 1.1.00.34, D6220 before 1.0.0.48, D6400…