CVEvulnerability
CVE-2021-45511
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-12-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.
Affected configurations
• netgear ac2100 firmware (< 1.2.0.88)
• netgear ac2400 firmware (< 1.2.0.88)
• netgear ac2600 firmware (< 1.2.0.88)
• netgear d7000 firmware (< 1.0.1.80)
• netgear r6220 firmware (< 1.1.0.110)
• netgear r6230 firmware (< 1.1.0.110)
• netgear r6260 firmware (< 1.1.0.84)
• netgear r6330 firmware (< 1.1.0.84)
• netgear r6350 firmware (< 1.1.0.84)
• netgear r6700v2 firmware (< 1.2.0.88)
• netgear r6800 firmware (< 1.2.0.88)
• netgear r6850 firmware (< 1.1.0.84)
• netgear r6900v2 firmware (< 1.2.0.88)
• netgear r7200 firmware (< 1.2.0.88)
• netgear r7350 firmware (< 1.2.0.88)
• netgear r7400 firmware (< 1.2.0.88)
• netgear r7450 firmware (< 1.2.0.88)
References
- https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133 Patch, Vendor Advisory
- https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133 Patch, Vendor Advisory