CVEvulnerability
CVE-2021-45499
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-12-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.2 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Description
Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
Affected configurations
• netgear r6900p firmware (< 1.3.3.140)
• netgear r7000p firmware (< 1.3.3.140)
• netgear r7900p firmware (< 1.4.2.84)
• netgear r7960p firmware (< 1.4.2.84)
• netgear r8000p firmware (< 1.4.2.84)
• netgear rax75 firmware (< 1.0.3.106)
• netgear rax80 firmware (< 1.0.3.106)